Overview

overview

8

Static

static

8

fa4dfd1744...b6.exe

windows7-x64

8

fa4dfd1744...b6.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    fa4dfd17446e765d111b6bbf1dbc05f417ba0b1fa9b6a9ccb5a05a9d60ce10b6

  • Size

    104KB

  • Sample

    221203-gzhfhsbd43

  • MD5

    11d486f69143a7796596a96c017655f4

  • SHA1

    5c4340333402bc3ac6493297d4174c2093b94813

  • SHA256

    fa4dfd17446e765d111b6bbf1dbc05f417ba0b1fa9b6a9ccb5a05a9d60ce10b6

  • SHA512

    425c4fef431f78a95fac0c89b34896b71c4a71579360dc97f734d99dde94fa2dd1aa220c9fc6f7e111d29b160c5c7461a545c3199d22481b5a61f4cd13a93953

  • SSDEEP

    3072:uetDOSpgJremwXSAvNdH1w4IqeolDHXOMxiU:2Spgxem/4NbTIq9D3Vxi

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      fa4dfd17446e765d111b6bbf1dbc05f417ba0b1fa9b6a9ccb5a05a9d60ce10b6

    • Size

      104KB

    • MD5

      11d486f69143a7796596a96c017655f4

    • SHA1

      5c4340333402bc3ac6493297d4174c2093b94813

    • SHA256

      fa4dfd17446e765d111b6bbf1dbc05f417ba0b1fa9b6a9ccb5a05a9d60ce10b6

    • SHA512

      425c4fef431f78a95fac0c89b34896b71c4a71579360dc97f734d99dde94fa2dd1aa220c9fc6f7e111d29b160c5c7461a545c3199d22481b5a61f4cd13a93953

    • SSDEEP

      3072:uetDOSpgJremwXSAvNdH1w4IqeolDHXOMxiU:2Spgxem/4NbTIq9D3Vxi

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks