Overview

overview

8

Static

static

8

9f1fc18c35...cd.exe

windows7-x64

8

9f1fc18c35...cd.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f1fc18c35082d48b09e5cd05d55de507a14e93b6954a3ba762fb4b5b66114cd

  • Size

    239KB

  • Sample

    221206-xjrx1sdg26

  • MD5

    d6d62bf4189a827938b870d10c4b9ee1

  • SHA1

    c3eac5cc9bb1a7f30c7b53e8de3c4d765cf63631

  • SHA256

    9f1fc18c35082d48b09e5cd05d55de507a14e93b6954a3ba762fb4b5b66114cd

  • SHA512

    2a7472afaab0db5420bc9a33d8276b75df6bcc1470c4097144bd2c0a4a4da6fa66fffe025303e844387a10e03f38fae16e0d8c10418385adaaff956254a68d79

  • SSDEEP

    6144:93qptRNRUc/4NkclmuanKpEaWiAOq2eJ/mQXrv:optic0Lan2sOq2eJ/t

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      9f1fc18c35082d48b09e5cd05d55de507a14e93b6954a3ba762fb4b5b66114cd

    • Size

      239KB

    • MD5

      d6d62bf4189a827938b870d10c4b9ee1

    • SHA1

      c3eac5cc9bb1a7f30c7b53e8de3c4d765cf63631

    • SHA256

      9f1fc18c35082d48b09e5cd05d55de507a14e93b6954a3ba762fb4b5b66114cd

    • SHA512

      2a7472afaab0db5420bc9a33d8276b75df6bcc1470c4097144bd2c0a4a4da6fa66fffe025303e844387a10e03f38fae16e0d8c10418385adaaff956254a68d79

    • SSDEEP

      6144:93qptRNRUc/4NkclmuanKpEaWiAOq2eJ/mQXrv:optic0Lan2sOq2eJ/t

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks