Overview

overview

8

Static

static

8

baa8a210ae...00.exe

windows7-x64

8

baa8a210ae...00.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    baa8a210ae91a136a861fc0771d7d854ce532ffc65ce033088c44249cc64d200

  • Size

    5.9MB

  • Sample

    221203-zrzc6shh8x

  • MD5

    72e220ec7eff80f0dfd88290e7cd4cdf

  • SHA1

    536b6880b9d7e8f2ff120b00fff8f5cf609b3e7b

  • SHA256

    baa8a210ae91a136a861fc0771d7d854ce532ffc65ce033088c44249cc64d200

  • SHA512

    53ded9e3bae76621985aabbc64c36233f5c5a70278bdaf0a128aaac1f1a8dfd360e0496b52db8a2f0bbc3172914079234890f68597568a3b99221e6af6be5788

  • SSDEEP

    24576:EDyTFtjSDyTFtjkDyTFtjSDyTFtjeDyTFtjtDyTFtjSDyTFtjdDyTFtjSDyTFtjm:9tzt5tztHtGtztOtztHtGtzt5t

Score
8/10
upx

Malware Config

Targets

    • Target

      baa8a210ae91a136a861fc0771d7d854ce532ffc65ce033088c44249cc64d200

    • Size

      5.9MB

    • MD5

      72e220ec7eff80f0dfd88290e7cd4cdf

    • SHA1

      536b6880b9d7e8f2ff120b00fff8f5cf609b3e7b

    • SHA256

      baa8a210ae91a136a861fc0771d7d854ce532ffc65ce033088c44249cc64d200

    • SHA512

      53ded9e3bae76621985aabbc64c36233f5c5a70278bdaf0a128aaac1f1a8dfd360e0496b52db8a2f0bbc3172914079234890f68597568a3b99221e6af6be5788

    • SSDEEP

      24576:EDyTFtjSDyTFtjkDyTFtjSDyTFtjeDyTFtjtDyTFtjSDyTFtjdDyTFtjSDyTFtjm:9tzt5tztHtGtztOtztHtGtzt5t

    Score
    8/10
    upx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks