Overview

overview

8

Static

static

8

ac984a5074...f1.exe

windows7-x64

8

ac984a5074...f1.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    ac984a50743337e6c2c92cd1c332ad309661b7d2fa539d74234099dd082fe0f1

  • Size

    227KB

  • Sample

    221204-lwrbgacd9z

  • MD5

    76a4608b46c29867953aa680eaabe2e9

  • SHA1

    cb22b9d952e123df952fad9b2cadbe98364aeba7

  • SHA256

    ac984a50743337e6c2c92cd1c332ad309661b7d2fa539d74234099dd082fe0f1

  • SHA512

    9fd1d13da681ab17e8d3dc5b6c66156eadb534bf6aaece5661653fc9492cf20565636eda0733937593b7612daa4e8d6c8bbb526c08361f1381f3b219fe072124

  • SSDEEP

    6144:XfZcX9YBZSVcDU+EcFlA8ELHbZ/MrQ5VjLovG:XhXYeU+Ec0bZ/MrQ5G

Score
8/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      ac984a50743337e6c2c92cd1c332ad309661b7d2fa539d74234099dd082fe0f1

    • Size

      227KB

    • MD5

      76a4608b46c29867953aa680eaabe2e9

    • SHA1

      cb22b9d952e123df952fad9b2cadbe98364aeba7

    • SHA256

      ac984a50743337e6c2c92cd1c332ad309661b7d2fa539d74234099dd082fe0f1

    • SHA512

      9fd1d13da681ab17e8d3dc5b6c66156eadb534bf6aaece5661653fc9492cf20565636eda0733937593b7612daa4e8d6c8bbb526c08361f1381f3b219fe072124

    • SSDEEP

      6144:XfZcX9YBZSVcDU+EcFlA8ELHbZ/MrQ5VjLovG:XhXYeU+Ec0bZ/MrQ5G

    Score
    8/10
    evasionpersistenceupx

    • Creates new service(s)

      persistence

    • Executes dropped EXE

    • Stops running service(s)

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks