Overview

overview

8

Static

static

c284d56fe8...52.exe

windows7-x64

8

c284d56fe8...52.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c284d56fe8f45d05ced8fb61d325cb00ed68c63ce6170f21405f28eef16dd152

  • Size

    764KB

  • Sample

    221202-bm46vsdc2z

  • MD5

    6f2583432748774275948f5058de1121

  • SHA1

    c20b6eb582a5df3c6571cd79662cf3597796f064

  • SHA256

    c284d56fe8f45d05ced8fb61d325cb00ed68c63ce6170f21405f28eef16dd152

  • SHA512

    bed7cae263c0103e8cbe3bff80595b40b1d9e5919abf7456fab839c82ba7ff4f048032946d93f4fc8ceda0767a25a2e9af0d0aebc4bb6cd6fdf028bd75dc5115

  • SSDEEP

    12288:bdPZdPnsH5utjISDyTFtjCPVdPZdPePldPZdPnsH5utjISDyTFtjQSDyTFtjfP:9sH5utjhDyTFtj7sH5utjhDyTFtjpDyH

Score
8/10
upx

Malware Config

Targets

    • Target

      c284d56fe8f45d05ced8fb61d325cb00ed68c63ce6170f21405f28eef16dd152

    • Size

      764KB

    • MD5

      6f2583432748774275948f5058de1121

    • SHA1

      c20b6eb582a5df3c6571cd79662cf3597796f064

    • SHA256

      c284d56fe8f45d05ced8fb61d325cb00ed68c63ce6170f21405f28eef16dd152

    • SHA512

      bed7cae263c0103e8cbe3bff80595b40b1d9e5919abf7456fab839c82ba7ff4f048032946d93f4fc8ceda0767a25a2e9af0d0aebc4bb6cd6fdf028bd75dc5115

    • SSDEEP

      12288:bdPZdPnsH5utjISDyTFtjCPVdPZdPePldPZdPnsH5utjISDyTFtjQSDyTFtjfP:9sH5utjhDyTFtj7sH5utjhDyTFtjpDyH

    Score
    8/10
    upx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks