Overview

overview

7

Static

static

7

patchCHIN.exe

windows7-x64

7

patchCHIN.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    patchCHIN.exe

  • Size

    1.7MB

  • Sample

    230615-q22fvahe2v

  • MD5

    318d51528fedf7d9293c4cfef42293dd

  • SHA1

    ce41028e8c9cf84502cb4820bad6b5f52d2918a0

  • SHA256

    e25cc727ec45add4e22c6bcccc73af992d3f67e126da8e7353a05afdede13523

  • SHA512

    1f6e09b3864e2093e0d2441157d393eeb9c339ec2fd36cc86c67b7aa2c32a2abecb02d5658fc04040c0b3988de0955e00c8de3cff547fd8dc57533ec2b8331e9

  • SSDEEP

    49152:TZuyVex0c49KgVmnmajUsKXhX9zao1dNInqgqDlmd9:TM9xWAhnVUs+RJNngqD4b

Score
7/10
upx

Malware Config

Targets

    • Target

      patchCHIN.exe

    • Size

      1.7MB

    • MD5

      318d51528fedf7d9293c4cfef42293dd

    • SHA1

      ce41028e8c9cf84502cb4820bad6b5f52d2918a0

    • SHA256

      e25cc727ec45add4e22c6bcccc73af992d3f67e126da8e7353a05afdede13523

    • SHA512

      1f6e09b3864e2093e0d2441157d393eeb9c339ec2fd36cc86c67b7aa2c32a2abecb02d5658fc04040c0b3988de0955e00c8de3cff547fd8dc57533ec2b8331e9

    • SSDEEP

      49152:TZuyVex0c49KgVmnmajUsKXhX9zao1dNInqgqDlmd9:TM9xWAhnVUs+RJNngqD4b

    Score
    7/10
    upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks