Overview

overview

8

Static

static

8

bf12b03a1d...3b.exe

windows7-x64

8

bf12b03a1d...3b.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bf12b03a1d5f6fa82dc8d0dc89a078b137cd195a4cd8314799de2d348ac6cb3b

  • Size

    177KB

  • Sample

    221203-as55nshf58

  • MD5

    ff98b80a88ad4e348b56cd8d24e0e03e

  • SHA1

    c68584b8b804e18102c10dd1c0ffc2fa34c937c9

  • SHA256

    bf12b03a1d5f6fa82dc8d0dc89a078b137cd195a4cd8314799de2d348ac6cb3b

  • SHA512

    87a1068e52198dce66c86673671c49b4fcfb80af3ae3cfa2bd65ee2282931045c0f0657d8ee86884067a74a78e36ea5b8381985b302f78cadb9ddfdbd498a933

  • SSDEEP

    3072:ymi+/dgy5Ef8doutaZZYCajVJ4Qk94A3aO5OCodJnUjD:ytSEf+oSaR6PLkPqO5OhW

Score
8/10
upx

Malware Config

Targets

    • Target

      bf12b03a1d5f6fa82dc8d0dc89a078b137cd195a4cd8314799de2d348ac6cb3b

    • Size

      177KB

    • MD5

      ff98b80a88ad4e348b56cd8d24e0e03e

    • SHA1

      c68584b8b804e18102c10dd1c0ffc2fa34c937c9

    • SHA256

      bf12b03a1d5f6fa82dc8d0dc89a078b137cd195a4cd8314799de2d348ac6cb3b

    • SHA512

      87a1068e52198dce66c86673671c49b4fcfb80af3ae3cfa2bd65ee2282931045c0f0657d8ee86884067a74a78e36ea5b8381985b302f78cadb9ddfdbd498a933

    • SSDEEP

      3072:ymi+/dgy5Ef8doutaZZYCajVJ4Qk94A3aO5OCodJnUjD:ytSEf+oSaR6PLkPqO5OhW

    Score
    8/10
    upx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks