Overview

overview

7

Static

static

3

TD-H8 Ham/...e.docx

windows7-x64

4

TD-H8 Ham/...e.docx

windows10-2004-x64

1

TD-H8 Ham/...de.exe

windows7-x64

7

TD-H8 Ham/...de.exe

windows10-2004-x64

7

TD-H8 Ham/...12.exe

windows7-x64

7

TD-H8 Ham/...12.exe

windows10-2004-x64

7

TD-H8 Ham/...de.pdf

windows7-x64

1

TD-H8 Ham/...de.pdf

windows10-2004-x64

1

TD-H8 Ham/...03.exe

windows7-x64

7

TD-H8 Ham/...03.exe

windows10-2004-x64

7

TD-H8 Ham/... 0.pdf

windows7-x64

1

TD-H8 Ham/... 0.pdf

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    cbfa8af900b4b3ae4729d59e6c0e38f8c0f733f32f3c63302cd4bebd9996d677.zip.zip

  • Size

    5.5MB

  • Sample

    231107-rjzpzaac22

  • MD5

    af2592944dc409a5d0ac562406538a57

  • SHA1

    cccde929a65f0ea4d28e12ad3e4c93ce22ef6a04

  • SHA256

    49cadb5eb2fc20355f545537d8fae3395bbbd1a12a8822076eea0a3453aa60dd

  • SHA512

    030040d60d470a8ba664be278754e1fbeebe12dff9527bb793d64f7a4a10ceda12a672fe7f6d35231a7939fb30102e6301b028800ee3969ca791672cf87c7f2c

  • SSDEEP

    98304:oKLyRg6Xq9YOwsz/GqQjUfkNFcoWtLG7Uf2Lodmm+xKAGq:oKQo9FJGNDGoMYUf2MdmmoKBq

Score
7/10
upx

Malware Config

Targets

    • Target

      TD-H8 Ham/1.Firmware Upgrade/!!!Readme!!! - Firmware upgrade Guide.docx

    • Size

      121KB

    • MD5

      42cc915514c0ba3e279130e67b71a1b7

    • SHA1

      fd587348a6f17598f25eff7420843ee2bde92e06

    • SHA256

      1bc3e5220e1f6e5755ffa688c82635a334031792b866556b822b5b9aa322d2ac

    • SHA512

      27043185ff96d68c87d95406897d21e63328da8695357f23603f48519353bed82ab93f0c5dcfd860c6f74a00c09803bb407d4619d6d053ebfffd1778b9c784f8

    • SSDEEP

      3072:TDR9UxJn0yRvM1XY2TkEt6666669zdxFxYlX2HjiiDpICO6HE+CRH:5EJDRk1IFEt6666669zXFulX2H9pIcHU

    Score
    4/10
    behavioral1behavioral2

    • Target

      TD-H8 Ham/1.Firmware Upgrade/IAP_Firmware_Upgrade.exe

    • Size

      1.2MB

    • MD5

      27010425ce90ab0a7b69fe355ce2c320

    • SHA1

      23a1af624763f75617fc418e773d7136f418ef81

    • SHA256

      ce04a81f0402033080e00b66d220d55b02eb8f2303993205301038cac7b66e44

    • SHA512

      f26cdc39057bc982527e3f414e6c389dd78044ebdf459fb76afbf887213d8bc76977b3ec78915243504885e7d161f8e91d8a1d4d40f8724761eb5bb287cbfdc2

    • SSDEEP

      24576:hTCMXuthC1jc1a05AuLz7J4doQ9TC69tZ50u:hTC4uOVcY6JLztup46HQu

    Score
    7/10
    upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral3behavioral4

    • Target

      TD-H8 Ham/2.Programming Software/TIDRADIO_H8(HAM)_setup230912.exe

    • Size

      1.2MB

    • MD5

      bdc155791264d5cae8ac30579fa0d887

    • SHA1

      1e68fb5578cc6ba03bcc12cced31173581547f40

    • SHA256

      1e68e91d3a93d3e6a48b612f0936d97b1d70ceee953e79cd60153d03f56dfde8

    • SHA512

      29ff78c80384bf6461b2afe2c3c1c61fc499138ddc923e5deb0c57fb49f884ab3fb620af79d53b3187acd1ba833e93cb4bbb85723d602d1a13ee7837babb1ad7

    • SSDEEP

      24576:hTCMXuthC1jc1a05AuLXjI4goQ9TC6Nh+25TEz:hTC4uOVcY6JLXEhp46Nh+6TEz

    Score
    7/10
    upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral5behavioral6

    • Target

      TD-H8 Ham/3.TXPower Tune/How to adjust low output power mode.pdf

    • Size

      181KB

    • MD5

      22afb15f5734009503f4c394f6f3f29a

    • SHA1

      d5f93b923f2fca618912c4e8b6da7a0e10f67871

    • SHA256

      dae6cd7d7a8f8895d579b8b047e183005448e6276ed00a7f874cd27c31b96c80

    • SHA512

      7d79f896403e70021ed67a83cb6c6b563a02e355297cab7c9367a0a0a9d531e5de056187dbd0047b2e0d41cca2d2cae1173bcfeabd624a3b81e1662bcf230337

    • SSDEEP

      3072:+mi2XZ9/PPOOQT37Ea1iWjWGa7dqtA3FhJy9HEKmb/Kx8+I0hY+6thdk791C9:+aHPODEOWGahvTJy9HEDb/t+jY+63AI

    Score
    1/10
    behavioral7behavioral8

    • Target

      TD-H8 Ham/3.TXPower Tune/TD-H8_TXPOWER_TUNE_setup221103.exe

    • Size

      1.2MB

    • MD5

      21994a57674199101334e485fce712c1

    • SHA1

      2f78bb0953696366e04ffa996ddfda8a33c61420

    • SHA256

      22aa6434ddbf77ce72bdfd2992109e32301116562c63fc8f8db880b426f60bb4

    • SHA512

      3a297dfe0e19f112e98b93642abdb9ccda2ab381cf4bee734006a2f989f8c6dc3dbd3200678351269283a7b8f1ac909ea3aee770e8f38ffb205d0735923e54bc

    • SSDEEP

      24576:hTCMXuthC1jc1a05AuLDjZ48oQ9TC6HEBUBmm:hTC4uOVcY6JLDjZnp46Heo9

    Score
    7/10
    upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral10behavioral9

    • Target

      TD-H8 Ham/TD-H8 User Manual - Ham ver2 0.pdf

    • Size

      2.6MB

    • MD5

      fd2c71ba650561b5f02187bece47b43c

    • SHA1

      7763ac5b6fa43116d915fe1edb136e7e66bf7f18

    • SHA256

      872604a1dcb02a0a7bd13c5878493652316538b5dd8270c41e67f148c313964a

    • SHA512

      dbb53410a246e25781bb95673b9da9bb386cc5383f08601fac014e5a3d311abe12223ddc7333463a71e34b39ba9d1c5c0c5778a5bd856494f8565ce385d81171

    • SSDEEP

      49152:gJw/4o1u+24hX9Ms/IOlMuOd43Y87ePJwQ5JOkgmG1xC7KGdGy8/r0gNeOAIiIf8:g8nLheeIOlMu443Y87ePJwQ5JOkgmG1o

    Score
    1/10
    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks