Overview

overview

8

Static

static

8

c79694d1be...98.exe

windows7-x64

8

c79694d1be...98.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c79694d1beb2096b5ecef44ff9f4213a0523dd060f8705b5ccfe9e9f40c9cd98

  • Size

    1.2MB

  • Sample

    221202-bm4kbsdc2y

  • MD5

    b2090b4b26b67bf2c63fdc22d67ae176

  • SHA1

    454f1f13b9c7d9858d80e45ddead409000c6f831

  • SHA256

    c79694d1beb2096b5ecef44ff9f4213a0523dd060f8705b5ccfe9e9f40c9cd98

  • SHA512

    7141764d6649f435a3cb6a2fe0888faad2184a8fc298ef051b633875bdeca48c3026ee2aba149baed00da7083f7b3b28619544ed1fcab507495043e39bb44344

  • SSDEEP

    12288:HPFdPZdPNPFdPZdPqPFdPZdPrPFdPZdPiPFdPZdPFPFdPZdPzSDyTFtj2SDyo1tj:aDyTFtjTDyo1tj

Score
8/10
upx

Malware Config

Targets

    • Target

      c79694d1beb2096b5ecef44ff9f4213a0523dd060f8705b5ccfe9e9f40c9cd98

    • Size

      1.2MB

    • MD5

      b2090b4b26b67bf2c63fdc22d67ae176

    • SHA1

      454f1f13b9c7d9858d80e45ddead409000c6f831

    • SHA256

      c79694d1beb2096b5ecef44ff9f4213a0523dd060f8705b5ccfe9e9f40c9cd98

    • SHA512

      7141764d6649f435a3cb6a2fe0888faad2184a8fc298ef051b633875bdeca48c3026ee2aba149baed00da7083f7b3b28619544ed1fcab507495043e39bb44344

    • SSDEEP

      12288:HPFdPZdPNPFdPZdPqPFdPZdPrPFdPZdPiPFdPZdPFPFdPZdPzSDyTFtj2SDyo1tj:aDyTFtjTDyo1tj

    Score
    8/10
    upx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks