Overview

overview

8

Static

static

7

4442e2acdc...66.exe

windows7-x64

8

4442e2acdc...66.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4442e2acdcf1e78ea7b2330cf9141366

  • Size

    123KB

  • Sample

    231225-3tptashher

  • MD5

    4442e2acdcf1e78ea7b2330cf9141366

  • SHA1

    bb6f3c86b7e661c9cf97e179f9c915b93fca941a

  • SHA256

    5af2208fbb026dd6aa0a89fa1bf544f163ef5903ed3573e9fb919d92da488524

  • SHA512

    c5ca3dcce564cdc070ef4046edd70d05a84e043dc0f6a4988aa4d2ab1f1acd063cc85c83c8c559672476895f2750b397c90aeb3c151b4f42dd93295fc043d480

  • SSDEEP

    3072:OeSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLLPn4OHDA:OVYrJrOSsRwcpxlE

Score
8/10
upx

Malware Config

Targets

    • Target

      4442e2acdcf1e78ea7b2330cf9141366

    • Size

      123KB

    • MD5

      4442e2acdcf1e78ea7b2330cf9141366

    • SHA1

      bb6f3c86b7e661c9cf97e179f9c915b93fca941a

    • SHA256

      5af2208fbb026dd6aa0a89fa1bf544f163ef5903ed3573e9fb919d92da488524

    • SHA512

      c5ca3dcce564cdc070ef4046edd70d05a84e043dc0f6a4988aa4d2ab1f1acd063cc85c83c8c559672476895f2750b397c90aeb3c151b4f42dd93295fc043d480

    • SSDEEP

      3072:OeSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLLPn4OHDA:OVYrJrOSsRwcpxlE

    Score
    8/10
    upx

    • Manipulates Digital Signatures

      Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks