Overview

overview

8

Static

static

8

3f9a118b18...6b.exe

windows7-x64

8

3f9a118b18...6b.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3f9a118b18858a5fc9d37000e768fb8e8d139bef2e78af902d07ee76fefe8f6b

  • Size

    5.2MB

  • Sample

    221203-zkcktshe21

  • MD5

    788810168de6f1000118ff3923e105dd

  • SHA1

    96d23b1692efd3a2608835eac6e2e11e4dc7b8d0

  • SHA256

    3f9a118b18858a5fc9d37000e768fb8e8d139bef2e78af902d07ee76fefe8f6b

  • SHA512

    68f050d155dfd2554205bd477a78e85f76e0f20bdf34449cf15996e99303102479bfb9c9da4a355436e099c715bc85daf96a7df16ecfbb457c0993bb5da3e0b3

  • SSDEEP

    12288:HPgdPrPFdPZdPiPFdPZdPFPFdPZdPhPgdPrPFdPZdPiPFdPZdPFPFdPZdPTPgdPc:

Score
8/10
upx

Malware Config

Targets

    • Target

      3f9a118b18858a5fc9d37000e768fb8e8d139bef2e78af902d07ee76fefe8f6b

    • Size

      5.2MB

    • MD5

      788810168de6f1000118ff3923e105dd

    • SHA1

      96d23b1692efd3a2608835eac6e2e11e4dc7b8d0

    • SHA256

      3f9a118b18858a5fc9d37000e768fb8e8d139bef2e78af902d07ee76fefe8f6b

    • SHA512

      68f050d155dfd2554205bd477a78e85f76e0f20bdf34449cf15996e99303102479bfb9c9da4a355436e099c715bc85daf96a7df16ecfbb457c0993bb5da3e0b3

    • SSDEEP

      12288:HPgdPrPFdPZdPiPFdPZdPFPFdPZdPhPgdPrPFdPZdPiPFdPZdPFPFdPZdPTPgdPc:

    Score
    8/10
    upx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks