Overview

overview

8

Static

static

1

42a824ecdf...be.exe

windows7-x64

8

42a824ecdf...be.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    42a824ecdfdace498cc08dbf101092f79bdf8d8049fbe129d972ba236706e9be

  • Size

    3.2MB

  • Sample

    230328-jdwr5ahf46

  • MD5

    3f2d772ee9e420732d5abdabd357a499

  • SHA1

    f2627c87d88cb903c0bd8024880252d4b6cef46d

  • SHA256

    42a824ecdfdace498cc08dbf101092f79bdf8d8049fbe129d972ba236706e9be

  • SHA512

    93d52ab002b0a4a52fe86a9e4ba0e0c2bb53495a32e43b4c3cdcf25146a581f7a8dd60d7e2df2e1d645e70bdaf7d55136aa645d10d09c6bc50a5a03ada201ddc

  • SSDEEP

    49152:z2gPu/65UFT4zAygZRZ8ruPAqxT51VUBM:m/PpxOuTZVUBM

Score
8/10
evasiontrojanupx

Malware Config

Targets

    • Target

      42a824ecdfdace498cc08dbf101092f79bdf8d8049fbe129d972ba236706e9be

    • Size

      3.2MB

    • MD5

      3f2d772ee9e420732d5abdabd357a499

    • SHA1

      f2627c87d88cb903c0bd8024880252d4b6cef46d

    • SHA256

      42a824ecdfdace498cc08dbf101092f79bdf8d8049fbe129d972ba236706e9be

    • SHA512

      93d52ab002b0a4a52fe86a9e4ba0e0c2bb53495a32e43b4c3cdcf25146a581f7a8dd60d7e2df2e1d645e70bdaf7d55136aa645d10d09c6bc50a5a03ada201ddc

    • SSDEEP

      49152:z2gPu/65UFT4zAygZRZ8ruPAqxT51VUBM:m/PpxOuTZVUBM

    Score
    8/10
    evasiontrojanupx

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks whether UAC is enabled

      evasiontrojan

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks