Overview

overview

8

Static

static

7

95d338b145...4a.exe

windows7-x64

8

95d338b145...4a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    95d338b145f56210124399d4b2b309291075e365cb9ea19665e0eefaa09abb4a

  • Size

    2.7MB

  • Sample

    231009-g7nmhaah6w

  • MD5

    40420292a6806912eca11bd33bbd6e41

  • SHA1

    d9f970de792fb4e724d34b4b335dc81ed8e71d23

  • SHA256

    95d338b145f56210124399d4b2b309291075e365cb9ea19665e0eefaa09abb4a

  • SHA512

    5c8a4227a7e9b40c837e7a96368cfaecc0d81acedce9ce0f4a7f53f2a89af53d6b95ecb439f12c85e6cbbb3ea7af0fc239d6144b2852e0cb7f8ed31ccd6a6a97

  • SSDEEP

    49152:ITGkQU5QZuTtS0rQMYOQ+q8CEGTG4QoTGHQV9KFeMz:IKkDWsM0r1QnJK4ZKHq0FeS

Score
8/10
upx

Malware Config

Targets

    • Target

      95d338b145f56210124399d4b2b309291075e365cb9ea19665e0eefaa09abb4a

    • Size

      2.7MB

    • MD5

      40420292a6806912eca11bd33bbd6e41

    • SHA1

      d9f970de792fb4e724d34b4b335dc81ed8e71d23

    • SHA256

      95d338b145f56210124399d4b2b309291075e365cb9ea19665e0eefaa09abb4a

    • SHA512

      5c8a4227a7e9b40c837e7a96368cfaecc0d81acedce9ce0f4a7f53f2a89af53d6b95ecb439f12c85e6cbbb3ea7af0fc239d6144b2852e0cb7f8ed31ccd6a6a97

    • SSDEEP

      49152:ITGkQU5QZuTtS0rQMYOQ+q8CEGTG4QoTGHQV9KFeMz:IKkDWsM0r1QnJK4ZKHq0FeS

    Score
    8/10
    upx

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks