Resubmissions

26/04/2023, 05:46

230426-ggqn6shc7w 7

26/04/2023, 05:36

230426-gak54shc4x 7

General

  • Target

    1.com

  • Size

    472KB

  • Sample

    230426-gak54shc4x

  • MD5

    7d279adf529721141bbb6768ed039ac5

  • SHA1

    498ec140dc0f1763bbb37d5b9194fc1448e4596b

  • SHA256

    0b3e1559b5ecac6846f44a8d6c2abc0d58816499e148500532b3c66e426ef23c

  • SHA512

    2fd563f58014f9df9c98496252047b1f2c5f8288065656e705d4e97aec3b3cabf7c22e070cfbc6f4d0b9c26adbeda4e8a0606010c2ffa0e93816f3ba852ebbf3

  • SSDEEP

    12288:bLHzRv6FusqtneXYPWv6oSm93yOz93yO:bDzRv6FutnPsN3R3

Score
7/10
upx

Malware Config

Targets

    • Target

      1.com

    • Size

      472KB

    • MD5

      7d279adf529721141bbb6768ed039ac5

    • SHA1

      498ec140dc0f1763bbb37d5b9194fc1448e4596b

    • SHA256

      0b3e1559b5ecac6846f44a8d6c2abc0d58816499e148500532b3c66e426ef23c

    • SHA512

      2fd563f58014f9df9c98496252047b1f2c5f8288065656e705d4e97aec3b3cabf7c22e070cfbc6f4d0b9c26adbeda4e8a0606010c2ffa0e93816f3ba852ebbf3

    • SSDEEP

      12288:bLHzRv6FusqtneXYPWv6oSm93yOz93yO:bDzRv6FutnPsN3R3

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks