General

  • Target

    NEAS.77d814a38abc3c61439c7796212d2690.exe

  • Size

    132KB

  • Sample

    231203-k4cydaag5y

  • MD5

    77d814a38abc3c61439c7796212d2690

  • SHA1

    6e7f140b67172dc1aa5537f20105b92386cadc9d

  • SHA256

    ec27f1ca119792f6402223cf375a176989f9f90058d22d2d6c55a62ba97df612

  • SHA512

    33f86812587623fe148d86b60146a162ad4db1cbe8dbe5d92bed917fc92352fd6343a801141df2f36f458f24f3d5fe5545d1e80d4ff89c418d6fea4f68d7d708

  • SSDEEP

    3072:tY9CUT62/UOVMgJsgJMgJogJwgJ0zqgJ01J3RgJ01JygJ01JK8gJ01JK2gJ01JKf:tY9C8QyFJlJFJRJZJqJyJ3CJyJbJyJWP

Score
10/10

Malware Config

Targets

    • Target

      NEAS.77d814a38abc3c61439c7796212d2690.exe

    • Size

      132KB

    • MD5

      77d814a38abc3c61439c7796212d2690

    • SHA1

      6e7f140b67172dc1aa5537f20105b92386cadc9d

    • SHA256

      ec27f1ca119792f6402223cf375a176989f9f90058d22d2d6c55a62ba97df612

    • SHA512

      33f86812587623fe148d86b60146a162ad4db1cbe8dbe5d92bed917fc92352fd6343a801141df2f36f458f24f3d5fe5545d1e80d4ff89c418d6fea4f68d7d708

    • SSDEEP

      3072:tY9CUT62/UOVMgJsgJMgJogJwgJ0zqgJ01J3RgJ01JygJ01JK8gJ01JK2gJ01JKf:tY9C8QyFJlJFJRJZJqJyJ3CJyJbJyJWP

    Score
    10/10
    • Upatre

      Upatre is a generic malware downloader.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks