Overview

overview

8

Static

static

8

b10f7a6503...b6.exe

windows7-x64

8

b10f7a6503...b6.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b10f7a65037cfa81c37661ca7962d54b8a954d1c427e1d840acf24866ae549b6

  • Size

    317KB

  • Sample

    221207-caqclsge5z

  • MD5

    108fba088fdc348c8d72ea5a7cea77e0

  • SHA1

    3af8475127846dbd4d1d53c723d3cc3991a7f292

  • SHA256

    b10f7a65037cfa81c37661ca7962d54b8a954d1c427e1d840acf24866ae549b6

  • SHA512

    5174cbad769a4f320ed138c622b71a359edaf3dfc1c69ebad51619e2fba8a981c47d88700c0a0cf2231a9072bd76c9f021a37602f372ea64ecbb18cf8e6b93f7

  • SSDEEP

    3072:kOXpHv1O0koutuVxz+8YPmK8d4aSnww00ptcfMPBm7pcC787LgJsnVZ7YK7fk7oa:JpmoSujMPgd4aSnF00LcUCMgJsnPtPC

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      b10f7a65037cfa81c37661ca7962d54b8a954d1c427e1d840acf24866ae549b6

    • Size

      317KB

    • MD5

      108fba088fdc348c8d72ea5a7cea77e0

    • SHA1

      3af8475127846dbd4d1d53c723d3cc3991a7f292

    • SHA256

      b10f7a65037cfa81c37661ca7962d54b8a954d1c427e1d840acf24866ae549b6

    • SHA512

      5174cbad769a4f320ed138c622b71a359edaf3dfc1c69ebad51619e2fba8a981c47d88700c0a0cf2231a9072bd76c9f021a37602f372ea64ecbb18cf8e6b93f7

    • SSDEEP

      3072:kOXpHv1O0koutuVxz+8YPmK8d4aSnww00ptcfMPBm7pcC787LgJsnVZ7YK7fk7oa:JpmoSujMPgd4aSnF00LcUCMgJsnPtPC

    Score
    8/10
    persistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks