Overview

overview

8

Static

static

8

dd4e3afb2a...0a.exe

windows7-x64

8

dd4e3afb2a...0a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dd4e3afb2a2ea6800301fc6bc55869685221d81045aa697f9c89d29e60f5580a

  • Size

    9.6MB

  • Sample

    221203-znwg4sdh76

  • MD5

    baee066a147e3e7cc605f525c1b3b917

  • SHA1

    0a7b1193fb18a9bb20632537f77c1aacf961ee0a

  • SHA256

    dd4e3afb2a2ea6800301fc6bc55869685221d81045aa697f9c89d29e60f5580a

  • SHA512

    7d77fc0f8dc5b90ed7c2d0c10aeaa0e715918bd191ed7507a1f0c5bf57ed05503b06114ea86d7aa1a8971c559ad41498aed042be2086ef809ab220adb0777561

  • SSDEEP

    24576:aDyTFtj+DyTFtjFDyTFtjBDyTFtjTDyTFtjzDyTFtj:HtntWtatYtYt

Score
8/10
upx

Malware Config

Targets

    • Target

      dd4e3afb2a2ea6800301fc6bc55869685221d81045aa697f9c89d29e60f5580a

    • Size

      9.6MB

    • MD5

      baee066a147e3e7cc605f525c1b3b917

    • SHA1

      0a7b1193fb18a9bb20632537f77c1aacf961ee0a

    • SHA256

      dd4e3afb2a2ea6800301fc6bc55869685221d81045aa697f9c89d29e60f5580a

    • SHA512

      7d77fc0f8dc5b90ed7c2d0c10aeaa0e715918bd191ed7507a1f0c5bf57ed05503b06114ea86d7aa1a8971c559ad41498aed042be2086ef809ab220adb0777561

    • SSDEEP

      24576:aDyTFtj+DyTFtjFDyTFtjBDyTFtjTDyTFtjzDyTFtj:HtntWtatYtYt

    Score
    8/10
    upx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks