Overview

overview

8

Static

static

f7edbb018d...69.exe

windows7-x64

8

f7edbb018d...69.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    f7edbb018dcccdf10ff56b78ffa7ea8cb94baa93c34f63b11d3f4c355263f569

  • Size

    172KB

  • Sample

    221204-d4kjwsgf6t

  • MD5

    05ea54c12e9da7db09838a713d4886bd

  • SHA1

    090541b662dde11f73ed8ebf27bbce47ece42086

  • SHA256

    f7edbb018dcccdf10ff56b78ffa7ea8cb94baa93c34f63b11d3f4c355263f569

  • SHA512

    4dbea645978fa1d77c4bb606700efc1031ad4a02cf893911f9b81ce8b0bb9f38158aafdddae03cfec375aa5859dfdc542cf94a2ce577337bf7168bb2bf709ecd

  • SSDEEP

    3072:142Z9jHSuTJET9EWbxPZ5v1KaxGeenTaIrtlIhrYOWeeNbv2eYwTQNjKGkq/YfpT:1427HSCJETH1h5v15xGeeTPEhrYOWee/

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      f7edbb018dcccdf10ff56b78ffa7ea8cb94baa93c34f63b11d3f4c355263f569

    • Size

      172KB

    • MD5

      05ea54c12e9da7db09838a713d4886bd

    • SHA1

      090541b662dde11f73ed8ebf27bbce47ece42086

    • SHA256

      f7edbb018dcccdf10ff56b78ffa7ea8cb94baa93c34f63b11d3f4c355263f569

    • SHA512

      4dbea645978fa1d77c4bb606700efc1031ad4a02cf893911f9b81ce8b0bb9f38158aafdddae03cfec375aa5859dfdc542cf94a2ce577337bf7168bb2bf709ecd

    • SSDEEP

      3072:142Z9jHSuTJET9EWbxPZ5v1KaxGeenTaIrtlIhrYOWeeNbv2eYwTQNjKGkq/YfpT:1427HSCJETH1h5v15xGeeTPEhrYOWee/

    Score
    8/10
    upxpersistence

    • Executes dropped EXE

    • Sets file execution options in registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks