Overview

overview

7

Static

static

7

2d6d25a395...c9.exe

windows7-x64

7

2d6d25a395...c9.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2d6d25a395fdc5ca6b32593627d6afc9

  • Size

    16KB

  • Sample

    231231-jbnzhaafa4

  • MD5

    2d6d25a395fdc5ca6b32593627d6afc9

  • SHA1

    8b04637093d0fa7d600556c4437ed4d137f8033d

  • SHA256

    b5239fe3e5b32ab97051aebd5f5401605f42b72b158b4dc744a063863ede9cef

  • SHA512

    1b1e859107dd832f139487087d34d609486d9e1573bfbcb1d0b7fb92e9ad0b6db5a2d55410c73001751e5911cc246bf905a07dbea59ca8f99e17a1b3021e5f06

  • SSDEEP

    384:KwDbVGXKX9898l67YHl0gfUKXpd8rBJSEmhhRW2miIHo3V23mCF:ZGX+9898FFDfpdWuhR+/HW23mC

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      2d6d25a395fdc5ca6b32593627d6afc9

    • Size

      16KB

    • MD5

      2d6d25a395fdc5ca6b32593627d6afc9

    • SHA1

      8b04637093d0fa7d600556c4437ed4d137f8033d

    • SHA256

      b5239fe3e5b32ab97051aebd5f5401605f42b72b158b4dc744a063863ede9cef

    • SHA512

      1b1e859107dd832f139487087d34d609486d9e1573bfbcb1d0b7fb92e9ad0b6db5a2d55410c73001751e5911cc246bf905a07dbea59ca8f99e17a1b3021e5f06

    • SSDEEP

      384:KwDbVGXKX9898l67YHl0gfUKXpd8rBJSEmhhRW2miIHo3V23mCF:ZGX+9898FFDfpdWuhR+/HW23mC

    Score
    7/10
    upxpersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks