General

  • Target

    f888db049e496ae8d3dd1126cd63832af2d48678303d91de309b7e86fea291bc

  • Size

    277KB

  • Sample

    230311-kemraaag9v

  • MD5

    2412ba3cc7a4abc9b96bd3c4c814345c

  • SHA1

    1c280bcf76ffec15a3b07e135f732fe7db807a64

  • SHA256

    f888db049e496ae8d3dd1126cd63832af2d48678303d91de309b7e86fea291bc

  • SHA512

    7f7946fa560ca3d9beb77ae073153a546cd1f09f82680b24fe870c0d2efcd0ca4dec3d0b464016d8ef24c0faded518f88bb91fe4404f637d564bfff9af7afb1d

  • SSDEEP

    6144:nXzKdNY49u8rV2jm3JCKvMiqG/301netx:4a4A5jikE01q

Score
7/10
upx

Malware Config

Targets

    • Target

      f888db049e496ae8d3dd1126cd63832af2d48678303d91de309b7e86fea291bc

    • Size

      277KB

    • MD5

      2412ba3cc7a4abc9b96bd3c4c814345c

    • SHA1

      1c280bcf76ffec15a3b07e135f732fe7db807a64

    • SHA256

      f888db049e496ae8d3dd1126cd63832af2d48678303d91de309b7e86fea291bc

    • SHA512

      7f7946fa560ca3d9beb77ae073153a546cd1f09f82680b24fe870c0d2efcd0ca4dec3d0b464016d8ef24c0faded518f88bb91fe4404f637d564bfff9af7afb1d

    • SSDEEP

      6144:nXzKdNY49u8rV2jm3JCKvMiqG/301netx:4a4A5jikE01q

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v6

Tasks