General

  • Target

    9b583be9cdeec14f6134ee5c2f2aecfc3d84bb2ab4b74e67971c22a8156eeb04

  • Size

    8.1MB

  • Sample

    221203-zwc1qsed74

  • MD5

    11a0b0326643f5ad36117ce277b2d647

  • SHA1

    85bc3efc68c5284f63701f17f9ff335c7fa98bde

  • SHA256

    9b583be9cdeec14f6134ee5c2f2aecfc3d84bb2ab4b74e67971c22a8156eeb04

  • SHA512

    71c4485f45f77f4e98fc1ec27c865b8dd67d9d4d2d6a2d47baf3bfd6d1ced72f114f2a47f70157457ad20cf99811432b01881ab71bf4d5749ebcb1d4ce5b51a8

  • SSDEEP

    98304:itztHtGtztPtztHtGtztStztHtGtztPtztHtGtzt:0BNABFBNABEBNABFBNAB

Score
8/10
upx

Malware Config

Targets

    • Target

      9b583be9cdeec14f6134ee5c2f2aecfc3d84bb2ab4b74e67971c22a8156eeb04

    • Size

      8.1MB

    • MD5

      11a0b0326643f5ad36117ce277b2d647

    • SHA1

      85bc3efc68c5284f63701f17f9ff335c7fa98bde

    • SHA256

      9b583be9cdeec14f6134ee5c2f2aecfc3d84bb2ab4b74e67971c22a8156eeb04

    • SHA512

      71c4485f45f77f4e98fc1ec27c865b8dd67d9d4d2d6a2d47baf3bfd6d1ced72f114f2a47f70157457ad20cf99811432b01881ab71bf4d5749ebcb1d4ce5b51a8

    • SSDEEP

      98304:itztHtGtztPtztHtGtztStztHtGtztPtztHtGtzt:0BNABFBNABEBNABFBNAB

    Score
    8/10
    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks