Overview

overview

9

Static

static

cb0ebe65c5...b1.exe

windows7-x64

9

cb0ebe65c5...b1.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb0ebe65c5b28dfd7355f9b053d09c24780810088bcc39f0ba56e00ddbd6cbb1

  • Size

    16KB

  • Sample

    221207-blrjdaec5z

  • MD5

    346c365ec404a0a065e5cd3a69d0a1e2

  • SHA1

    a04209c87db119a7ff4ee157c07740a73a5a4658

  • SHA256

    cb0ebe65c5b28dfd7355f9b053d09c24780810088bcc39f0ba56e00ddbd6cbb1

  • SHA512

    c8b6ac23c1e999042577f18041511d80a9ba0f7e318a2efbed8bda790f8fb44b732d1eea40e0ab0be6cbafe14efcecc84a54815123494345e1e248140ae36eba

  • SSDEEP

    192:agXUAwyn9mJAzyEm+EZAhhNIQ+nh+TTeYpsq5lTSBiQaHIycGwqAYG9:agRD9mJYyEmPamhheTWuluPU9c

Score
9/10
persistenceupx

Malware Config

Targets

    • Target

      cb0ebe65c5b28dfd7355f9b053d09c24780810088bcc39f0ba56e00ddbd6cbb1

    • Size

      16KB

    • MD5

      346c365ec404a0a065e5cd3a69d0a1e2

    • SHA1

      a04209c87db119a7ff4ee157c07740a73a5a4658

    • SHA256

      cb0ebe65c5b28dfd7355f9b053d09c24780810088bcc39f0ba56e00ddbd6cbb1

    • SHA512

      c8b6ac23c1e999042577f18041511d80a9ba0f7e318a2efbed8bda790f8fb44b732d1eea40e0ab0be6cbafe14efcecc84a54815123494345e1e248140ae36eba

    • SSDEEP

      192:agXUAwyn9mJAzyEm+EZAhhNIQ+nh+TTeYpsq5lTSBiQaHIycGwqAYG9:agRD9mJYyEmPamhheTWuluPU9c

    Score
    9/10
    persistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Drops file in Drivers directory

    • Sets DLL path for service in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks