Overview

overview

8

Static

static

8

e0fcd6e37a...01.exe

windows7-x64

8

e0fcd6e37a...01.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e0fcd6e37ad251cbb6ed2339195e81d15931bd153bc398c8cf2c1e1f4c695201

  • Size

    218KB

  • Sample

    221203-wqtjrada24

  • MD5

    f9bddf20f5050fbbd129d692bc9f903e

  • SHA1

    a4aa61a91e694c35283c34a8011afd56b98e878f

  • SHA256

    e0fcd6e37ad251cbb6ed2339195e81d15931bd153bc398c8cf2c1e1f4c695201

  • SHA512

    3e5236445b8841cc752c476b28fde4ac88db5640ca65f96546b7a13acd6baba9ba583a707b84c80fe2c97a01ea4a878e0322269d2eeb59681220ed2c1d173256

  • SSDEEP

    3072:+i42gakPubCunvt2+AT9j3e8cM2zaGCDWm3cMpbiB8wd/j:z4rOfc12mGCDWmsObiB5j

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      e0fcd6e37ad251cbb6ed2339195e81d15931bd153bc398c8cf2c1e1f4c695201

    • Size

      218KB

    • MD5

      f9bddf20f5050fbbd129d692bc9f903e

    • SHA1

      a4aa61a91e694c35283c34a8011afd56b98e878f

    • SHA256

      e0fcd6e37ad251cbb6ed2339195e81d15931bd153bc398c8cf2c1e1f4c695201

    • SHA512

      3e5236445b8841cc752c476b28fde4ac88db5640ca65f96546b7a13acd6baba9ba583a707b84c80fe2c97a01ea4a878e0322269d2eeb59681220ed2c1d173256

    • SSDEEP

      3072:+i42gakPubCunvt2+AT9j3e8cM2zaGCDWm3cMpbiB8wd/j:z4rOfc12mGCDWmsObiB5j

    Score
    8/10
    persistenceupx

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks