Overview

overview

8

Static

static

e6f578ab34...d8.exe

windows7-x64

8

e6f578ab34...d8.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    e6f578ab34c42c92ed26fc0fe0e9b914494cbda08ef1b2a27873f886bdc667d8

  • Size

    124KB

  • Sample

    221203-xqhypabe2v

  • MD5

    a11abd7c806ff8fa6abd964ab8a9ead4

  • SHA1

    9b71932614aa05222bf7211d8fe103d27552b85f

  • SHA256

    e6f578ab34c42c92ed26fc0fe0e9b914494cbda08ef1b2a27873f886bdc667d8

  • SHA512

    25d60c8ba4ebb78bcbf18a2b0b09f4697b3899fce2f40d672c6fee0a3ad3f3eefe2ec9421004b23cb1dd4ba189d2ab08448c5840eaa6f2d7a0cb64f81eaa7a47

  • SSDEEP

    1536:bF5FlScArPVllrvwJRyQ233YHrXAVODPCSrPD4eJNp1pMVIRBCfOTHDAgcrAZoNn:bBlScu3DPJ

Score
8/10
upx

Malware Config

Targets

    • Target

      e6f578ab34c42c92ed26fc0fe0e9b914494cbda08ef1b2a27873f886bdc667d8

    • Size

      124KB

    • MD5

      a11abd7c806ff8fa6abd964ab8a9ead4

    • SHA1

      9b71932614aa05222bf7211d8fe103d27552b85f

    • SHA256

      e6f578ab34c42c92ed26fc0fe0e9b914494cbda08ef1b2a27873f886bdc667d8

    • SHA512

      25d60c8ba4ebb78bcbf18a2b0b09f4697b3899fce2f40d672c6fee0a3ad3f3eefe2ec9421004b23cb1dd4ba189d2ab08448c5840eaa6f2d7a0cb64f81eaa7a47

    • SSDEEP

      1536:bF5FlScArPVllrvwJRyQ233YHrXAVODPCSrPD4eJNp1pMVIRBCfOTHDAgcrAZoNn:bBlScu3DPJ

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks