General

  • Target

    40ecf79156120f0eef5df9134acaa5ede2b5e171efeba016f11b8794720eb01f

  • Size

    277KB

  • Sample

    230322-c779paee33

  • MD5

    b6ca65aa28b99f0346049127bd7f5979

  • SHA1

    45d805d02a3f99dc0dc03de175dbd5c239642dd5

  • SHA256

    40ecf79156120f0eef5df9134acaa5ede2b5e171efeba016f11b8794720eb01f

  • SHA512

    30cf3711b7b016bc9db80aba046a8e3b7cd1cd2e750db64edf925d7627a69b07052186cb8536c7131f54a83235b092005a9d46cd8be36968ed2983a02387173c

  • SSDEEP

    6144:RXzKdNY49u8rViK+UFkkQNltmkIPl01netQ:Ka4AQ/YlXUl01T

Score
7/10
upx

Malware Config

Targets

    • Target

      40ecf79156120f0eef5df9134acaa5ede2b5e171efeba016f11b8794720eb01f

    • Size

      277KB

    • MD5

      b6ca65aa28b99f0346049127bd7f5979

    • SHA1

      45d805d02a3f99dc0dc03de175dbd5c239642dd5

    • SHA256

      40ecf79156120f0eef5df9134acaa5ede2b5e171efeba016f11b8794720eb01f

    • SHA512

      30cf3711b7b016bc9db80aba046a8e3b7cd1cd2e750db64edf925d7627a69b07052186cb8536c7131f54a83235b092005a9d46cd8be36968ed2983a02387173c

    • SSDEEP

      6144:RXzKdNY49u8rViK+UFkkQNltmkIPl01netQ:Ka4AQ/YlXUl01T

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks