General

  • Target

    2f2d791b9e749a0fe0cf1ea7ed179aaffed090599ed336322533a06cd903b00c

  • Size

    277KB

  • Sample

    230328-krshasbg2v

  • MD5

    dd49af65413b4f1e66618663ff7a5926

  • SHA1

    20844d7cf8285ca09ec846e461d3723fb6bcacd8

  • SHA256

    2f2d791b9e749a0fe0cf1ea7ed179aaffed090599ed336322533a06cd903b00c

  • SHA512

    23fce555039d620afdae0dc61064ed09c88cd0cfda4927d15ae2728cdaa42d9ea96d4fb5efddec9f5914020f92f1ceffd59567f63c7055761ddce05a305c42f4

  • SSDEEP

    6144:+XzKdNY49u8rVr1T24cj3VUKIpBdm101netb:Fa4A2y4cxfIU01o

Score
7/10
upx

Malware Config

Targets

    • Target

      2f2d791b9e749a0fe0cf1ea7ed179aaffed090599ed336322533a06cd903b00c

    • Size

      277KB

    • MD5

      dd49af65413b4f1e66618663ff7a5926

    • SHA1

      20844d7cf8285ca09ec846e461d3723fb6bcacd8

    • SHA256

      2f2d791b9e749a0fe0cf1ea7ed179aaffed090599ed336322533a06cd903b00c

    • SHA512

      23fce555039d620afdae0dc61064ed09c88cd0cfda4927d15ae2728cdaa42d9ea96d4fb5efddec9f5914020f92f1ceffd59567f63c7055761ddce05a305c42f4

    • SSDEEP

      6144:+XzKdNY49u8rVr1T24cj3VUKIpBdm101netb:Fa4A2y4cxfIU01o

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Tasks