Overview

overview

8

Static

static

680067a153...32.exe

windows7-x64

8

680067a153...32.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    680067a153585ff02763b098dcf5239ddbd8173c2a2976c77f68d30c9bfb1932

  • Size

    897KB

  • Sample

    221205-1xwpxabe47

  • MD5

    e19332c8fae47a03db83ecc7b566c7ef

  • SHA1

    1666bd1fa122f8dfc0830ad64349625d5af108c0

  • SHA256

    680067a153585ff02763b098dcf5239ddbd8173c2a2976c77f68d30c9bfb1932

  • SHA512

    af11d76acdf21e845ea3ba864ec459b52b601b16efc6aabc994ee5c0a2c78fcb4083b4c561bce0245bbc1167d4e32e1aa6a75f6888dc141ed981a5fe3af900b6

  • SSDEEP

    12288:MYUQxvtN/hTaV84DA6i65jmpWqt3v0Kp8ZyuckuNMLQUfq9yvUr7WRYVG7mVotDY:dxvtN/KbivvNwyuZiYQYaFaRp7o2t1m

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      680067a153585ff02763b098dcf5239ddbd8173c2a2976c77f68d30c9bfb1932

    • Size

      897KB

    • MD5

      e19332c8fae47a03db83ecc7b566c7ef

    • SHA1

      1666bd1fa122f8dfc0830ad64349625d5af108c0

    • SHA256

      680067a153585ff02763b098dcf5239ddbd8173c2a2976c77f68d30c9bfb1932

    • SHA512

      af11d76acdf21e845ea3ba864ec459b52b601b16efc6aabc994ee5c0a2c78fcb4083b4c561bce0245bbc1167d4e32e1aa6a75f6888dc141ed981a5fe3af900b6

    • SSDEEP

      12288:MYUQxvtN/hTaV84DA6i65jmpWqt3v0Kp8ZyuckuNMLQUfq9yvUr7WRYVG7mVotDY:dxvtN/KbivvNwyuZiYQYaFaRp7o2t1m

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks