Overview

overview

8

Static

static

cc1ef20c1e...24.exe

windows7-x64

8

cc1ef20c1e...24.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cc1ef20c1e57b617ad43357cc26699d504db3b0303aaa22992fd8a74d0676324

  • Size

    447KB

  • Sample

    221204-p8cwdseh7t

  • MD5

    e987a1c60cd679d8a84fdc299a22065f

  • SHA1

    b87f3b9e919a26a9e9fd79b3d16e79e95ceb04ab

  • SHA256

    cc1ef20c1e57b617ad43357cc26699d504db3b0303aaa22992fd8a74d0676324

  • SHA512

    689c4fcab1c38659d498110ec1b6103ffe357f618583a018b929a8d212fe4ad5651e28ba129bb2cfc2486db2b2fd42c928ea31f668391bd1b937741ac7d5417f

  • SSDEEP

    6144:5ZunObR8sVImcyYC5Jpusn3L6KvXwXe3OZaxpr4IjCjPqlbYZFfW552z5c3Xjbx6:WK+mz1iO3O4xpTjCbq9Yrd5k/dIkRnh4

Score
8/10
upx

Malware Config

Targets

    • Target

      cc1ef20c1e57b617ad43357cc26699d504db3b0303aaa22992fd8a74d0676324

    • Size

      447KB

    • MD5

      e987a1c60cd679d8a84fdc299a22065f

    • SHA1

      b87f3b9e919a26a9e9fd79b3d16e79e95ceb04ab

    • SHA256

      cc1ef20c1e57b617ad43357cc26699d504db3b0303aaa22992fd8a74d0676324

    • SHA512

      689c4fcab1c38659d498110ec1b6103ffe357f618583a018b929a8d212fe4ad5651e28ba129bb2cfc2486db2b2fd42c928ea31f668391bd1b937741ac7d5417f

    • SSDEEP

      6144:5ZunObR8sVImcyYC5Jpusn3L6KvXwXe3OZaxpr4IjCjPqlbYZFfW552z5c3Xjbx6:WK+mz1iO3O4xpTjCbq9Yrd5k/dIkRnh4

    Score
    8/10
    upx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks