General

  • Target

    fa25d15ebbb5171400c843d1952f8d61

  • Size

    1.0MB

  • Sample

    231222-vfpmdaahfr

  • MD5

    fa25d15ebbb5171400c843d1952f8d61

  • SHA1

    a8169d503c89a5ecaaa20aa55cfc8a17ddc266b6

  • SHA256

    b1a8c01673bae08ee77040cd3413dad04dfd1f60befb759f141e64082940fcff

  • SHA512

    ec198760f6d7fa7bbe130585ebc57b1ab16e54acff51544ace07ea6d9084ae8680eb5a10cf6fd9b2e2a2b3ca80ac45ae72370705c53a1d6cc5bc798e97032481

  • SSDEEP

    24576:KD3euKmLCkWZWU5cHTrlQzSraIKu78ThO3pEUaUTV4s:s3+pFzuHXLaI8KaUT

Score
7/10
upx

Malware Config

Targets

    • Target

      fa25d15ebbb5171400c843d1952f8d61

    • Size

      1.0MB

    • MD5

      fa25d15ebbb5171400c843d1952f8d61

    • SHA1

      a8169d503c89a5ecaaa20aa55cfc8a17ddc266b6

    • SHA256

      b1a8c01673bae08ee77040cd3413dad04dfd1f60befb759f141e64082940fcff

    • SHA512

      ec198760f6d7fa7bbe130585ebc57b1ab16e54acff51544ace07ea6d9084ae8680eb5a10cf6fd9b2e2a2b3ca80ac45ae72370705c53a1d6cc5bc798e97032481

    • SSDEEP

      24576:KD3euKmLCkWZWU5cHTrlQzSraIKu78ThO3pEUaUTV4s:s3+pFzuHXLaI8KaUT

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

MITRE ATT&CK Enterprise v15

Tasks