Overview

overview

8

Static

static

8

2d7f330825...fa.exe

windows7-x64

8

2d7f330825...fa.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    2d7f3308253c9c1ce0e7c33b7ca23e1f95ecb0938799f8dc20338462db2d24fa

  • Size

    5.0MB

  • Sample

    221203-1cwt6sfe74

  • MD5

    f778963b1a29e39d813a896dedbda8b5

  • SHA1

    3be468a66515ee6c32605dfc29bc66ec9b5b00ee

  • SHA256

    2d7f3308253c9c1ce0e7c33b7ca23e1f95ecb0938799f8dc20338462db2d24fa

  • SHA512

    c09bbe871464e83e71554074a4ef7fe95368f27bf80451307508bfc7af9ab2dd77753b015046be9d0861dfd6975f7b8685c28e61002eeb3f5848c2249b27e1ba

  • SSDEEP

    24576:3DyTFtjJDyTFtjoDyTFtj3DyTFtjJDyTFtjpDyo1tj2DyTFtjJDyTFtjoDyTFtjl:QtytNt8tytNtntytNt8tytNt

Score
8/10
upx

Malware Config

Targets

    • Target

      2d7f3308253c9c1ce0e7c33b7ca23e1f95ecb0938799f8dc20338462db2d24fa

    • Size

      5.0MB

    • MD5

      f778963b1a29e39d813a896dedbda8b5

    • SHA1

      3be468a66515ee6c32605dfc29bc66ec9b5b00ee

    • SHA256

      2d7f3308253c9c1ce0e7c33b7ca23e1f95ecb0938799f8dc20338462db2d24fa

    • SHA512

      c09bbe871464e83e71554074a4ef7fe95368f27bf80451307508bfc7af9ab2dd77753b015046be9d0861dfd6975f7b8685c28e61002eeb3f5848c2249b27e1ba

    • SSDEEP

      24576:3DyTFtjJDyTFtjoDyTFtj3DyTFtjJDyTFtjpDyo1tj2DyTFtjJDyTFtjoDyTFtjl:QtytNt8tytNtntytNt8tytNt

    Score
    8/10
    upx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks