Overview

overview

8

Static

static

7

upload.zip

windows10-2004-x64

8

Resubmissions

19/05/2023, 19:41

230519-yd7lysfg36 8

03/02/2023, 20:09

230203-yw7pnsba48 8

Sharing

Copy URL Twitter E-mail

General

  • Target

    upload.zip.7z

  • Size

    64.6MB

  • Sample

    230519-yd7lysfg36

  • MD5

    90fa15a023f1e916748bbbc6462d9476

  • SHA1

    e8048b00d95f2e45b1d4c845ef89ea074b131159

  • SHA256

    7e3d87ad429823529ad981805578019f0b292bd886c7b401c0ef9b52f05d4b02

  • SHA512

    eb819af44576cda3cc4d0df1cc94e2c9baaa3a6c576599fa1c104ff0fbc06e2308706b04b5da7efb5f760d9cd785f7a8bd519f4df88c328d4ba29c968bee8b38

  • SSDEEP

    1572864:T5GTC8cyU93cU8txuAvh976E8MK1fXZNQtdE5uR6aUR6dp:T5UC8jUwtxzh6k4f4tdv6dED

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      upload.zip

    • Size

      64.6MB

    • MD5

      2003027ee11b478ef706542a7da31332

    • SHA1

      59ad91383e36b48cbeb0bd7bf382b6001f8e149a

    • SHA256

      6ef48b7980bb8767f2aab3b55b910e585d7764ee1906ae56eb2a632d0a0099ed

    • SHA512

      7795be6c874d313eac0b35b19d2bf511741240f5921cf0251de5772c60d64a587c79ca1ab073b370e2d1791ca2bfc05f524652aa817ef8bdb535ebddbe678c33

    • SSDEEP

      1572864:wDcZ4ZU/ROoNsDvvzlQfKMbWZ6kMfOoaHGeVVjOKw6Ls0BawD:wD84ZEROoN2UKMbWokAaJV5Q0B3D

    Score
    8/10
    persistenceupx

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks