Overview

overview

8

Static

static

8

b9fa0a1b4e...87.exe

windows7-x64

8

b9fa0a1b4e...87.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b9fa0a1b4e72bc112a1b63b43468a887

  • Size

    359KB

  • Sample

    230201-fwwy3aca44

  • MD5

    b9fa0a1b4e72bc112a1b63b43468a887

  • SHA1

    30b18424f52217f427b0273bf5bc3db87b2e6f5f

  • SHA256

    7088a91fd4b7cde83ef0036392e20bbf5227e4afcb3ac8be30ab2c81dcad8c7d

  • SHA512

    6f06cf5446241970354366b1188a9ee1aca06072ffeb49ecfa104b5426b945e291367961978a2fc7de742751a3731822706c0fc2cc78542a20d937f68852f70d

  • SSDEEP

    6144:YuIlWqB+ihabs7Ch9KwyF5LeLodp2D1Mmakda0qLgTIlyahe:D6Wq4aaE6KwyF5L0Y2D1PqLKPye

Score
8/10
evasionupx

Malware Config

Targets

    • Target

      b9fa0a1b4e72bc112a1b63b43468a887

    • Size

      359KB

    • MD5

      b9fa0a1b4e72bc112a1b63b43468a887

    • SHA1

      30b18424f52217f427b0273bf5bc3db87b2e6f5f

    • SHA256

      7088a91fd4b7cde83ef0036392e20bbf5227e4afcb3ac8be30ab2c81dcad8c7d

    • SHA512

      6f06cf5446241970354366b1188a9ee1aca06072ffeb49ecfa104b5426b945e291367961978a2fc7de742751a3731822706c0fc2cc78542a20d937f68852f70d

    • SSDEEP

      6144:YuIlWqB+ihabs7Ch9KwyF5LeLodp2D1Mmakda0qLgTIlyahe:D6Wq4aaE6KwyF5L0Y2D1PqLKPye

    Score
    8/10
    evasionupx

    • Modifies Windows Firewall

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks