Overview

overview

8

Static

static

7

4830f72729...c8.exe

windows7-x64

8

4830f72729...c8.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4830f7272997dbe36816d53e8304a0c8

  • Size

    250KB

  • Sample

    231226-bjtwqaadh4

  • MD5

    4830f7272997dbe36816d53e8304a0c8

  • SHA1

    7bf4cb1a4799e38e3721636deaa48edefea0841a

  • SHA256

    e8478837c90b601ebfd54a24ffa735a7aefe830ae27955c1e4486269c1426c10

  • SHA512

    f483196b12b8e94df8a91c36f04dbacd3d0245b52dbb9f0430c3267f98cd81dc0ac06250cbf871a9266962e8f8b08ef173ad9b2562307647b78acc36ac50ce3b

  • SSDEEP

    6144:mhieuJDr5T8b2ufqBLjSB/MS7irtIa6cwoD8ZroSfjGFA:DeKrJJuf86AYcwoaoSbr

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      4830f7272997dbe36816d53e8304a0c8

    • Size

      250KB

    • MD5

      4830f7272997dbe36816d53e8304a0c8

    • SHA1

      7bf4cb1a4799e38e3721636deaa48edefea0841a

    • SHA256

      e8478837c90b601ebfd54a24ffa735a7aefe830ae27955c1e4486269c1426c10

    • SHA512

      f483196b12b8e94df8a91c36f04dbacd3d0245b52dbb9f0430c3267f98cd81dc0ac06250cbf871a9266962e8f8b08ef173ad9b2562307647b78acc36ac50ce3b

    • SSDEEP

      6144:mhieuJDr5T8b2ufqBLjSB/MS7irtIa6cwoD8ZroSfjGFA:DeKrJJuf86AYcwoaoSbr

    Score
    8/10
    persistenceupx

    • Modifies Installed Components in the registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks