Overview

overview

9

Static

static

7589f3239f...e4.exe

windows7-x64

9

7589f3239f...e4.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7589f3239f1c1a0c197198ecaa9265eea7a6086bd22325513ba6069d5338a6e4

  • Size

    829KB

  • Sample

    221204-bl52rsdf45

  • MD5

    8b948b01bd9c38a44df97a8798a48779

  • SHA1

    2e408abc4e6949511c1e24d9cde614780186383b

  • SHA256

    7589f3239f1c1a0c197198ecaa9265eea7a6086bd22325513ba6069d5338a6e4

  • SHA512

    2fff504ec4f787a081cbaf8eac87beead7871189cefdefb2f4ee3e2d4235a9ae55699e57781afae45f26d0f63ac4556bddc7fe0833f7dfa804c1bc1ad703b075

  • SSDEEP

    12288:Lr3ZBIRPu2mnTUYTuONESdkPF7exEEsj/stQtlFfP0JfH7cQgb812Qo3PExGOJQ8:/ZB22pTQON5dkc96safPMHrc8n384v

Score
9/10
persistenceupx

Malware Config

Targets

    • Target

      7589f3239f1c1a0c197198ecaa9265eea7a6086bd22325513ba6069d5338a6e4

    • Size

      829KB

    • MD5

      8b948b01bd9c38a44df97a8798a48779

    • SHA1

      2e408abc4e6949511c1e24d9cde614780186383b

    • SHA256

      7589f3239f1c1a0c197198ecaa9265eea7a6086bd22325513ba6069d5338a6e4

    • SHA512

      2fff504ec4f787a081cbaf8eac87beead7871189cefdefb2f4ee3e2d4235a9ae55699e57781afae45f26d0f63ac4556bddc7fe0833f7dfa804c1bc1ad703b075

    • SSDEEP

      12288:Lr3ZBIRPu2mnTUYTuONESdkPF7exEEsj/stQtlFfP0JfH7cQgb812Qo3PExGOJQ8:/ZB22pTQON5dkc96safPMHrc8n384v

    Score
    9/10
    persistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks