Overview

overview

8

Static

static

f775b93fcb...ad.exe

windows7-x64

8

f775b93fcb...ad.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    f775b93fcbf33e00f307b1810821a01992484a047b546d12af5095a56adaacad

  • Size

    1.6MB

  • Sample

    221203-wsp94sdb45

  • MD5

    d197aa94f519089e147eefa626e75889

  • SHA1

    70988dd4ea632079cbf87cd53ef3e49649ad31f4

  • SHA256

    f775b93fcbf33e00f307b1810821a01992484a047b546d12af5095a56adaacad

  • SHA512

    e04f70c5e4df3df177ad4c336e1434328a1eee27d5dd2a47e4933959e0f6da86ed85eb6cdb33632fa289354058ddcaa4cc2606c7eb5d61ad913f2e91a41e02be

  • SSDEEP

    24576:ndp3UYUb2iz88tlJ4E54PmPTiAT08xu0gCONiRz6GLha72yg+PJUT/oD:ncYOF54E5PbiAT0I9gCOyz6d70+KW

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      f775b93fcbf33e00f307b1810821a01992484a047b546d12af5095a56adaacad

    • Size

      1.6MB

    • MD5

      d197aa94f519089e147eefa626e75889

    • SHA1

      70988dd4ea632079cbf87cd53ef3e49649ad31f4

    • SHA256

      f775b93fcbf33e00f307b1810821a01992484a047b546d12af5095a56adaacad

    • SHA512

      e04f70c5e4df3df177ad4c336e1434328a1eee27d5dd2a47e4933959e0f6da86ed85eb6cdb33632fa289354058ddcaa4cc2606c7eb5d61ad913f2e91a41e02be

    • SSDEEP

      24576:ndp3UYUb2iz88tlJ4E54PmPTiAT08xu0gCONiRz6GLha72yg+PJUT/oD:ncYOF54E5PbiAT0I9gCOyz6d70+KW

    Score
    8/10
    upxpersistence

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks