General

  • Target

    bf420fa90658beexeexeexeex.exe

  • Size

    43KB

  • Sample

    230709-yglhwsfg36

  • MD5

    bf420fa90658bed18451c79f5a6189b3

  • SHA1

    4f37928114e133d69a3dab9379eb1b60aa55b0cf

  • SHA256

    b3f1c5f4d840ba14b6ebca34b232643487b7f5922e50a36518b5d61f745a7e2e

  • SHA512

    660b539728ce265aaf25e75d4c2f99962fc43f67036c058719bb57474b67ffb1915370dcf0f71290a029ce2093817f6613a33b4ac6a112021534bccef2582716

  • SSDEEP

    768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzfm5oU3tu8/Y:qUmnpomddpMOtEvwDpjjaYaFAh5Nw

Score
7/10
upx

Malware Config

Targets

    • Target

      bf420fa90658beexeexeexeex.exe

    • Size

      43KB

    • MD5

      bf420fa90658bed18451c79f5a6189b3

    • SHA1

      4f37928114e133d69a3dab9379eb1b60aa55b0cf

    • SHA256

      b3f1c5f4d840ba14b6ebca34b232643487b7f5922e50a36518b5d61f745a7e2e

    • SHA512

      660b539728ce265aaf25e75d4c2f99962fc43f67036c058719bb57474b67ffb1915370dcf0f71290a029ce2093817f6613a33b4ac6a112021534bccef2582716

    • SSDEEP

      768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzfm5oU3tu8/Y:qUmnpomddpMOtEvwDpjjaYaFAh5Nw

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v6

Tasks