General

  • Target

    NEAS.1f54c79f7e0a41bc509b9f41ea9354a0.exe

  • Size

    422KB

  • Sample

    231113-g6zclsaf4y

  • MD5

    1f54c79f7e0a41bc509b9f41ea9354a0

  • SHA1

    145b992c23a4061f3d7ca2c2a08ffbddedd59a5f

  • SHA256

    c4dd301a642a01d80718a00790f43b0d39240af63a23fbf8175e187a0c5e598b

  • SHA512

    90e7a4a10061b9cab6551fcfbe50da892af47b218ab16ecbb709ec5aa6c9ea3d4ba5844b4f7d9a6a0d670a6d04fc76b4f92ec25270ca5423caaa53edbb5d89f2

  • SSDEEP

    12288:GnRCG8owe1SRHCxH3VrBLfWHoCveTA74a:GnRCG8owe1SRGH3VrBLfWHoCveTA0a

Score
7/10
upx

Malware Config

Targets

    • Target

      NEAS.1f54c79f7e0a41bc509b9f41ea9354a0.exe

    • Size

      422KB

    • MD5

      1f54c79f7e0a41bc509b9f41ea9354a0

    • SHA1

      145b992c23a4061f3d7ca2c2a08ffbddedd59a5f

    • SHA256

      c4dd301a642a01d80718a00790f43b0d39240af63a23fbf8175e187a0c5e598b

    • SHA512

      90e7a4a10061b9cab6551fcfbe50da892af47b218ab16ecbb709ec5aa6c9ea3d4ba5844b4f7d9a6a0d670a6d04fc76b4f92ec25270ca5423caaa53edbb5d89f2

    • SSDEEP

      12288:GnRCG8owe1SRHCxH3VrBLfWHoCveTA74a:GnRCG8owe1SRGH3VrBLfWHoCveTA0a

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks