Overview

overview

8

Static

static

7

43ec28d5d1...ef.exe

windows7-x64

8

43ec28d5d1...ef.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    43ec28d5d173c35116d6f99fb46796ef

  • Size

    123KB

  • Sample

    240105-rv2npsdfhk

  • MD5

    43ec28d5d173c35116d6f99fb46796ef

  • SHA1

    8453cc16df15b761d1ea45242f0c0c2410a52518

  • SHA256

    28c9cba99faa53a6ca0a45bf2802c1859971edc7100669c07417878660c2bdd2

  • SHA512

    fe2c3540b35c10f2cbb3ef740af73ac01f7e55e7815621214a9998b40eeb39e2798a98bad94cbda42559f87bd95481aba10c3c25fc16ef62014f07b365ed1acd

  • SSDEEP

    3072:OeSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLLXJmY:OVYrJrOSsRwcpBJmY

Score
8/10
upx

Malware Config

Targets

    • Target

      43ec28d5d173c35116d6f99fb46796ef

    • Size

      123KB

    • MD5

      43ec28d5d173c35116d6f99fb46796ef

    • SHA1

      8453cc16df15b761d1ea45242f0c0c2410a52518

    • SHA256

      28c9cba99faa53a6ca0a45bf2802c1859971edc7100669c07417878660c2bdd2

    • SHA512

      fe2c3540b35c10f2cbb3ef740af73ac01f7e55e7815621214a9998b40eeb39e2798a98bad94cbda42559f87bd95481aba10c3c25fc16ef62014f07b365ed1acd

    • SSDEEP

      3072:OeSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLLXJmY:OVYrJrOSsRwcpBJmY

    Score
    8/10
    upx

    • Manipulates Digital Signatures

      Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks