General

  • Target

    e30f7d9029c7146628118551869fc2a460357d3a37bf412aa8dc79a3637c2083

  • Size

    7.0MB

  • Sample

    221207-egnhpscg34

  • MD5

    f41ec653a11e59628b198177176684b0

  • SHA1

    face01bc45d3eda5f37fea41bcbd42118ec926b1

  • SHA256

    e30f7d9029c7146628118551869fc2a460357d3a37bf412aa8dc79a3637c2083

  • SHA512

    69b777aa941ecdd571130cce43dcf3ce8de1743697cf31ac8eaf484e5a203866fb8509ed89f2bf9174bcd3e1b7e0368aa6c8e258d7a69fc335fadedf283eb3eb

  • SSDEEP

    98304:uHcwcaS+HcwcaS+7cwcaS+QcwcaS+OcwcaS+pcwcaS+9cwcaS+ZcwcaS+1cwcaSW:

Score
8/10
upx

Malware Config

Targets

    • Target

      e30f7d9029c7146628118551869fc2a460357d3a37bf412aa8dc79a3637c2083

    • Size

      7.0MB

    • MD5

      f41ec653a11e59628b198177176684b0

    • SHA1

      face01bc45d3eda5f37fea41bcbd42118ec926b1

    • SHA256

      e30f7d9029c7146628118551869fc2a460357d3a37bf412aa8dc79a3637c2083

    • SHA512

      69b777aa941ecdd571130cce43dcf3ce8de1743697cf31ac8eaf484e5a203866fb8509ed89f2bf9174bcd3e1b7e0368aa6c8e258d7a69fc335fadedf283eb3eb

    • SSDEEP

      98304:uHcwcaS+HcwcaS+7cwcaS+QcwcaS+OcwcaS+pcwcaS+9cwcaS+ZcwcaS+1cwcaSW:

    Score
    8/10
    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks