Overview

overview

8

Static

static

ef9232ca6e...18.exe

windows7-x64

8

ef9232ca6e...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    ef9232ca6e23d0dc056bc921ee1d5d07bf5998d23c8cb6b69a2a054019a9ad18

  • Size

    213KB

  • Sample

    221203-26eneshf8x

  • MD5

    0949d4dafbf6bbfa8bbedcd1016272a7

  • SHA1

    bad56c5ff82bafa4ec3639dbab68ac5fc6fc69ee

  • SHA256

    ef9232ca6e23d0dc056bc921ee1d5d07bf5998d23c8cb6b69a2a054019a9ad18

  • SHA512

    c833f9ffbc6410d9115dc7a93ad18df44239b35dd448298179e97437486ff05c48a0e536c4506ea66819532c2f525b17a8f312b514491a0a9a524538400ada44

  • SSDEEP

    6144:E/0uosDAv8QMGQ1LWvPEPIAdR12FNfL1L:EJDDAv8QMjwkPhYf

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      ef9232ca6e23d0dc056bc921ee1d5d07bf5998d23c8cb6b69a2a054019a9ad18

    • Size

      213KB

    • MD5

      0949d4dafbf6bbfa8bbedcd1016272a7

    • SHA1

      bad56c5ff82bafa4ec3639dbab68ac5fc6fc69ee

    • SHA256

      ef9232ca6e23d0dc056bc921ee1d5d07bf5998d23c8cb6b69a2a054019a9ad18

    • SHA512

      c833f9ffbc6410d9115dc7a93ad18df44239b35dd448298179e97437486ff05c48a0e536c4506ea66819532c2f525b17a8f312b514491a0a9a524538400ada44

    • SSDEEP

      6144:E/0uosDAv8QMGQ1LWvPEPIAdR12FNfL1L:EJDDAv8QMjwkPhYf

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks