Overview

overview

8

Static

static

8

a4a4219549...15.exe

windows7-x64

8

a4a4219549...15.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a4a4219549746f1d1e59b7c8851953458209bdd7ae980e9b2d99b1a4e3b9a115

  • Size

    21KB

  • Sample

    221205-l7h48shg47

  • MD5

    33132384cb4bf2e475c3670bf592dfb7

  • SHA1

    61f850235516e56d4d6defe7e4777a9e85d4aac7

  • SHA256

    a4a4219549746f1d1e59b7c8851953458209bdd7ae980e9b2d99b1a4e3b9a115

  • SHA512

    61fc4a8648a18ab2e98e09b093eb86bf5cfb7041577892103e879c629ac99288dbf352b033339a3b581a80726741ac3093a4f17e560439d556c01e39b4591b44

  • SSDEEP

    384:gi4Xm1G9WXnsagorpzOk+xk5qRS3xooZ/Kz/l2tB8bu1w1sdzyDgTXl2:giGxAXT8EYRyvZ/Kz/l2tBha1wyDgh

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      a4a4219549746f1d1e59b7c8851953458209bdd7ae980e9b2d99b1a4e3b9a115

    • Size

      21KB

    • MD5

      33132384cb4bf2e475c3670bf592dfb7

    • SHA1

      61f850235516e56d4d6defe7e4777a9e85d4aac7

    • SHA256

      a4a4219549746f1d1e59b7c8851953458209bdd7ae980e9b2d99b1a4e3b9a115

    • SHA512

      61fc4a8648a18ab2e98e09b093eb86bf5cfb7041577892103e879c629ac99288dbf352b033339a3b581a80726741ac3093a4f17e560439d556c01e39b4591b44

    • SSDEEP

      384:gi4Xm1G9WXnsagorpzOk+xk5qRS3xooZ/Kz/l2tB8bu1w1sdzyDgTXl2:giGxAXT8EYRyvZ/Kz/l2tBha1wyDgh

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks