Overview

overview

9

Static

static

bc615b4fb8...5d.exe

windows7-x64

9

bc615b4fb8...5d.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    bc615b4fb8dd7cebdbcd4e2ac2da048895962aa32b063c845fa77ae74cf7d25d

  • Size

    1.2MB

  • Sample

    221207-b882yagd4v

  • MD5

    daa8bb7d1098853808f1be0eb34db449

  • SHA1

    58674dacdf4336d3a19bd80dcf5fd9076ede0389

  • SHA256

    bc615b4fb8dd7cebdbcd4e2ac2da048895962aa32b063c845fa77ae74cf7d25d

  • SHA512

    dd090f514056293db0ce26b7504c772e3ed31c23fd3b67549a5f5f88dbebecca94fc1f9aff2c4d5b2379741f8dbbde12e15d8d1edaecbac8b734cf1d80ec0694

  • SSDEEP

    24576:NieoSFV+TdT6iZZsK7DIc4XMS+SL9qtquBkjp4KBVfwyWQo0tn4VcCUeXX4:NzFM5THZZsKpcM1SL9SNHcno0d4OY4

Score
9/10
upx

Malware Config

Targets

    • Target

      bc615b4fb8dd7cebdbcd4e2ac2da048895962aa32b063c845fa77ae74cf7d25d

    • Size

      1.2MB

    • MD5

      daa8bb7d1098853808f1be0eb34db449

    • SHA1

      58674dacdf4336d3a19bd80dcf5fd9076ede0389

    • SHA256

      bc615b4fb8dd7cebdbcd4e2ac2da048895962aa32b063c845fa77ae74cf7d25d

    • SHA512

      dd090f514056293db0ce26b7504c772e3ed31c23fd3b67549a5f5f88dbebecca94fc1f9aff2c4d5b2379741f8dbbde12e15d8d1edaecbac8b734cf1d80ec0694

    • SSDEEP

      24576:NieoSFV+TdT6iZZsK7DIc4XMS+SL9qtquBkjp4KBVfwyWQo0tn4VcCUeXX4:NzFM5THZZsKpcM1SL9SNHcno0d4OY4

    Score
    9/10
    upx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Drops file in Drivers directory

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks