General

  • Target

    Windows10Upgrade9252.exe

  • Size

    6.0MB

  • Sample

    230615-sdz9zsaa7z

  • MD5

    7da0f1dd7b0e8e883568b42f5184cbec

  • SHA1

    fb9ec929827606da12fb3d7594be1837577a5993

  • SHA256

    d972e967b79e3a5eaac3f2670c3022cfc85fdae953661093159866129fc36b31

  • SHA512

    c8b8d4922754a1d1d54b2d03dd00daace8e3ef3bc593b7910f180f7d9e1cd976da5fb73c8bf8cd3cc91f27c6996e936feee29b9300c0d5360c76b0e5ab15efe3

  • SSDEEP

    98304:9vGPYCQkTuGpNF4/E0bGz+KkfUHFJ3codBd9V0TomHzAzYkhxph7vH3Ckht5fDCK:9+PYC9qGp/4MmGz+K6QD9dBd9VKomkzb

Score
7/10

Malware Config

Targets

    • Target

      Windows10Upgrade9252.exe

    • Size

      6.0MB

    • MD5

      7da0f1dd7b0e8e883568b42f5184cbec

    • SHA1

      fb9ec929827606da12fb3d7594be1837577a5993

    • SHA256

      d972e967b79e3a5eaac3f2670c3022cfc85fdae953661093159866129fc36b31

    • SHA512

      c8b8d4922754a1d1d54b2d03dd00daace8e3ef3bc593b7910f180f7d9e1cd976da5fb73c8bf8cd3cc91f27c6996e936feee29b9300c0d5360c76b0e5ab15efe3

    • SSDEEP

      98304:9vGPYCQkTuGpNF4/E0bGz+KkfUHFJ3codBd9V0TomHzAzYkhxph7vH3Ckht5fDCK:9+PYC9qGp/4MmGz+K6QD9dBd9VKomkzb

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks