General

  • Target

    NEAS.ed6dab10c1205510eae2d8d36ed3af10.exe

  • Size

    90KB

  • Sample

    231107-ymst6afa8z

  • MD5

    ed6dab10c1205510eae2d8d36ed3af10

  • SHA1

    ac73057a00f39e019cb5655334f247f7d2abe443

  • SHA256

    e6b6209f29fe27bddcd4d2b26f619be60484267e99e852eb5412ff0dfb862a04

  • SHA512

    94c6b082061fcc15537d05796f50fd4c78898f036cd44e8dff91cba097dde4834af1dbaca7377457d0e6d641282196be1aa65a8d2a29aec3cd557cd45d9e31b9

  • SSDEEP

    1536:DY9jw/dUT62rGdiUOWWrMbtebtfJibtfJnt8btfJntqgbtfJntqotg0RN:DY9CUT62/UOVMbkb1Jib1Jnib1Jnwgbh

Score
10/10

Malware Config

Targets

    • Target

      NEAS.ed6dab10c1205510eae2d8d36ed3af10.exe

    • Size

      90KB

    • MD5

      ed6dab10c1205510eae2d8d36ed3af10

    • SHA1

      ac73057a00f39e019cb5655334f247f7d2abe443

    • SHA256

      e6b6209f29fe27bddcd4d2b26f619be60484267e99e852eb5412ff0dfb862a04

    • SHA512

      94c6b082061fcc15537d05796f50fd4c78898f036cd44e8dff91cba097dde4834af1dbaca7377457d0e6d641282196be1aa65a8d2a29aec3cd557cd45d9e31b9

    • SSDEEP

      1536:DY9jw/dUT62rGdiUOWWrMbtebtfJibtfJnt8btfJntqgbtfJntqotg0RN:DY9CUT62/UOVMbkb1Jib1Jnib1Jnwgbh

    Score
    10/10
    • Upatre

      Upatre is a generic malware downloader.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks