Overview

overview

7

Static

static

7

10f690fcab...8d.exe

windows7-x64

7

10f690fcab...8d.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    10f690fcab1b2e3686d5f3f2b25c71b52d8247036c34d0454933832141721b8d

  • Size

    5.4MB

  • Sample

    231029-qrb37shg45

  • MD5

    46c0b164fe00ae7ac205708a6e098da6

  • SHA1

    1ff3a0ee285b6f70ee2e2113d8bc97c4c52a1c21

  • SHA256

    10f690fcab1b2e3686d5f3f2b25c71b52d8247036c34d0454933832141721b8d

  • SHA512

    1aaf21ec93ef95ed0b52c421bd3b479318b48b2841b23e77c1819260ea47dc4e5262a1c39623a633c290f12f43830e31743de0d2be226364fa473ce210b04ad0

  • SSDEEP

    98304:WM0FSUz4eSmbKFo2kcSrl6WgAPMUk9gNDdpl8wDkXDHnIbY/UeycSkg+PHjkengU:70IZAVaCOgfiDHUY/UrcSF+LFngR771/

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      10f690fcab1b2e3686d5f3f2b25c71b52d8247036c34d0454933832141721b8d

    • Size

      5.4MB

    • MD5

      46c0b164fe00ae7ac205708a6e098da6

    • SHA1

      1ff3a0ee285b6f70ee2e2113d8bc97c4c52a1c21

    • SHA256

      10f690fcab1b2e3686d5f3f2b25c71b52d8247036c34d0454933832141721b8d

    • SHA512

      1aaf21ec93ef95ed0b52c421bd3b479318b48b2841b23e77c1819260ea47dc4e5262a1c39623a633c290f12f43830e31743de0d2be226364fa473ce210b04ad0

    • SSDEEP

      98304:WM0FSUz4eSmbKFo2kcSrl6WgAPMUk9gNDdpl8wDkXDHnIbY/UeycSkg+PHjkengU:70IZAVaCOgfiDHUY/UrcSF+LFngR771/

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks