General

  • Target

    961d28ef9fa28b7289817a55b6a6d048e6a4da5fffb70184246e433657c2c5c1

  • Size

    5.2MB

  • Sample

    221206-rh8lgshc9v

  • MD5

    f0d8a02d68954dcc43ad8bf87b4442ad

  • SHA1

    512c32b9395f6666cf7dc08b57e404b51f4a3e14

  • SHA256

    961d28ef9fa28b7289817a55b6a6d048e6a4da5fffb70184246e433657c2c5c1

  • SHA512

    b05c7eb1ffb9dffc94073cbf6b2c9ab81a10f9078448855b8b9c8f1e2d5418695d67f442b3d1594c2baa840973d54e9247896a820f44448c3a801fae36cf2dcd

  • SSDEEP

    98304:grt5rt9rtHrt3rt5rt9rtrrt3rt5rt9rt:ETPp5TPV5TP

Score
8/10
upx

Malware Config

Targets

    • Target

      961d28ef9fa28b7289817a55b6a6d048e6a4da5fffb70184246e433657c2c5c1

    • Size

      5.2MB

    • MD5

      f0d8a02d68954dcc43ad8bf87b4442ad

    • SHA1

      512c32b9395f6666cf7dc08b57e404b51f4a3e14

    • SHA256

      961d28ef9fa28b7289817a55b6a6d048e6a4da5fffb70184246e433657c2c5c1

    • SHA512

      b05c7eb1ffb9dffc94073cbf6b2c9ab81a10f9078448855b8b9c8f1e2d5418695d67f442b3d1594c2baa840973d54e9247896a820f44448c3a801fae36cf2dcd

    • SSDEEP

      98304:grt5rt9rtHrt3rt5rt9rtrrt3rt5rt9rt:ETPp5TPV5TP

    Score
    8/10
    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks