General

  • Target

    dde31f28c6a9e19d9adccfe450ca83b9a7172e755c4fc3d0d1e3498895f227ff

  • Size

    223KB

  • Sample

    231105-3n73paee4s

  • MD5

    0228f041c0b147d438477197ed290a8a

  • SHA1

    e564b03f86459c01c7db4a9916c3558afc6edc03

  • SHA256

    dde31f28c6a9e19d9adccfe450ca83b9a7172e755c4fc3d0d1e3498895f227ff

  • SHA512

    7233a4a5f58533bf5cabdf488b528cfcb19b7ed6cf4af2c3efa180e5c351eeb655086d676ee1f77b75c02e7b345abb2b7efce3c26b30f3e94ea5868822a88739

  • SSDEEP

    6144:KwPSUONLNsuWA7koN+boRN3i4CbRcyXLAE:KOuW5o/+Rc

Score
8/10
upx

Malware Config

Targets

    • Target

      dde31f28c6a9e19d9adccfe450ca83b9a7172e755c4fc3d0d1e3498895f227ff

    • Size

      223KB

    • MD5

      0228f041c0b147d438477197ed290a8a

    • SHA1

      e564b03f86459c01c7db4a9916c3558afc6edc03

    • SHA256

      dde31f28c6a9e19d9adccfe450ca83b9a7172e755c4fc3d0d1e3498895f227ff

    • SHA512

      7233a4a5f58533bf5cabdf488b528cfcb19b7ed6cf4af2c3efa180e5c351eeb655086d676ee1f77b75c02e7b345abb2b7efce3c26b30f3e94ea5868822a88739

    • SSDEEP

      6144:KwPSUONLNsuWA7koN+boRN3i4CbRcyXLAE:KOuW5o/+Rc

    Score
    8/10
    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks