General

  • Target

    a8cb59d12bb69bexeexeexeex.exe

  • Size

    90KB

  • Sample

    230709-lba4rabh74

  • MD5

    a8cb59d12bb69b9dce2d237e43127ad0

  • SHA1

    d6702e55a96793c0037cb2d416836bf0b0b0ba04

  • SHA256

    aaf31b2a241706a5f2dc50cb4993da803c60970cc12746eb3ce14ef45a725459

  • SHA512

    16c86989fdf8521055e4d23667a199a0f8a775f79648039d49c70f355ab309b8f69ff3b14e8cb8ebabc7fcc10b7187dde817af4d8b73c7f4f312e288b3368339

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjuv4:zCsanOtEvwDpjg

Score
7/10
upx

Malware Config

Targets

    • Target

      a8cb59d12bb69bexeexeexeex.exe

    • Size

      90KB

    • MD5

      a8cb59d12bb69b9dce2d237e43127ad0

    • SHA1

      d6702e55a96793c0037cb2d416836bf0b0b0ba04

    • SHA256

      aaf31b2a241706a5f2dc50cb4993da803c60970cc12746eb3ce14ef45a725459

    • SHA512

      16c86989fdf8521055e4d23667a199a0f8a775f79648039d49c70f355ab309b8f69ff3b14e8cb8ebabc7fcc10b7187dde817af4d8b73c7f4f312e288b3368339

    • SSDEEP

      1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjuv4:zCsanOtEvwDpjg

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v6

Tasks