Overview

overview

8

Static

static

3

eb0601803a...84.exe

windows7-x64

8

eb0601803a...84.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    eb0601803a1bfe18c47a11c6fb5ebf2ece40405573376b7ed605cc3e08051c84

  • Size

    8.6MB

  • Sample

    231009-kbjv8adf88

  • MD5

    4c54e81adec62a8fce08efc5639f782b

  • SHA1

    0c584a7ac5a130bbc2288d8236da4232d39a26e0

  • SHA256

    eb0601803a1bfe18c47a11c6fb5ebf2ece40405573376b7ed605cc3e08051c84

  • SHA512

    dca3ef394f7dd3f33966e41606361eb32fd834b7f963c6746675cde4560cbbe75e68c5c48f1c9684de0debbf7f0ba01acb53698335e359b9cc163376a330fef4

  • SSDEEP

    196608:EW+8TAznnl4O7xD4Vn+YivaMOw8K+d+Jm:EuTAzh7UitOw8/z

Score
8/10
upx

Malware Config

Targets

    • Target

      eb0601803a1bfe18c47a11c6fb5ebf2ece40405573376b7ed605cc3e08051c84

    • Size

      8.6MB

    • MD5

      4c54e81adec62a8fce08efc5639f782b

    • SHA1

      0c584a7ac5a130bbc2288d8236da4232d39a26e0

    • SHA256

      eb0601803a1bfe18c47a11c6fb5ebf2ece40405573376b7ed605cc3e08051c84

    • SHA512

      dca3ef394f7dd3f33966e41606361eb32fd834b7f963c6746675cde4560cbbe75e68c5c48f1c9684de0debbf7f0ba01acb53698335e359b9cc163376a330fef4

    • SSDEEP

      196608:EW+8TAznnl4O7xD4Vn+YivaMOw8K+d+Jm:EuTAzh7UitOw8/z

    Score
    8/10
    upx

    • Modifies RDP port number used by Windows

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks