Overview

overview

9

Static

static

8

8a9aaf7307...36.exe

windows7-x64

8

8a9aaf7307...36.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a9aaf7307755c1bd535b997dd1df51fd6de6e7fbe685f7b2c30695544264f36

  • Size

    87KB

  • Sample

    221204-dfqe8sba37

  • MD5

    9d6da546d949d2739c95ece43ac4d27a

  • SHA1

    f76e78ac4cbf869173cbcbd824d69c65b9a8f083

  • SHA256

    8a9aaf7307755c1bd535b997dd1df51fd6de6e7fbe685f7b2c30695544264f36

  • SHA512

    d50166d74e5794dd0e010e35dd458e29aa32cb44a4ced6c33b79ba818591f32338d367356fc5bd7ec42116e14cdc4c0a2bd46e200184984404577bc7ae3d294b

  • SSDEEP

    1536:8g+3oThuKr+Dd/oR+tbOihf2tAv4pT9IOn42fCWoCnw1DPsBSAMHxia:8J2EKrcd/Ptyihf26v4TIOnTfd4DuPwM

Score
9/10
upx

Malware Config

Targets

    • Target

      8a9aaf7307755c1bd535b997dd1df51fd6de6e7fbe685f7b2c30695544264f36

    • Size

      87KB

    • MD5

      9d6da546d949d2739c95ece43ac4d27a

    • SHA1

      f76e78ac4cbf869173cbcbd824d69c65b9a8f083

    • SHA256

      8a9aaf7307755c1bd535b997dd1df51fd6de6e7fbe685f7b2c30695544264f36

    • SHA512

      d50166d74e5794dd0e010e35dd458e29aa32cb44a4ced6c33b79ba818591f32338d367356fc5bd7ec42116e14cdc4c0a2bd46e200184984404577bc7ae3d294b

    • SSDEEP

      1536:8g+3oThuKr+Dd/oR+tbOihf2tAv4pT9IOn42fCWoCnw1DPsBSAMHxia:8J2EKrcd/Ptyihf26v4TIOnTfd4DuPwM

    Score
    9/10
    upx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Drops file in Drivers directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks