Overview

overview

8

Static

static

1

50eb4707e1...9a.exe

windows7-x64

8

50eb4707e1...9a.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    50eb4707e15aa3b77ce920ce2ea14af4e399aa6e69801a6eaaa3332d9f45179a

  • Size

    1.4MB

  • Sample

    230901-sy76bsfh43

  • MD5

    6863b4eb128ff31a5ea3fea2a447bfcc

  • SHA1

    7c926b61edafafb3837139a0109f8e5ae0ff4763

  • SHA256

    50eb4707e15aa3b77ce920ce2ea14af4e399aa6e69801a6eaaa3332d9f45179a

  • SHA512

    c5db4f449f8947dbe976dcbc58ecc857140eb3edb15fde32bd95a2f4aaf6a7d7a8eb200cd21ddd1c28a43c88709182fd148e5be22669b9d12ccaac6ef41baf55

  • SSDEEP

    24576:BbzKjZQYfXDPJZOE9PjCFaAL11MJY7pjtafbojRAaUtYQCK16dck0tWrHVrEH7e:JK9QYfDPJZr9ra11M+jtIbCRLlv7p0tc

Score
8/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      50eb4707e15aa3b77ce920ce2ea14af4e399aa6e69801a6eaaa3332d9f45179a

    • Size

      1.4MB

    • MD5

      6863b4eb128ff31a5ea3fea2a447bfcc

    • SHA1

      7c926b61edafafb3837139a0109f8e5ae0ff4763

    • SHA256

      50eb4707e15aa3b77ce920ce2ea14af4e399aa6e69801a6eaaa3332d9f45179a

    • SHA512

      c5db4f449f8947dbe976dcbc58ecc857140eb3edb15fde32bd95a2f4aaf6a7d7a8eb200cd21ddd1c28a43c88709182fd148e5be22669b9d12ccaac6ef41baf55

    • SSDEEP

      24576:BbzKjZQYfXDPJZOE9PjCFaAL11MJY7pjtafbojRAaUtYQCK16dck0tWrHVrEH7e:JK9QYfDPJZr9ra11M+jtIbCRLlv7p0tc

    Score
    8/10
    discoverypersistenceupx

    • Downloads MZ/PE file

    • Modifies Installed Components in the registry

      persistence

    • Sets file execution options in registry

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks