Overview

overview

8

Static

static

7

451c2ccd16...d3.exe

windows7-x64

8

451c2ccd16...d3.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    451c2ccd160c615e916013b70d4ab8d3

  • Size

    123KB

  • Sample

    240106-dlbh9sggf5

  • MD5

    451c2ccd160c615e916013b70d4ab8d3

  • SHA1

    670a8e414ebfd8482eca3cf588d42824ef6d24c7

  • SHA256

    6af6c46ca733bfbce769a89a625b3c699d90a8876cf509b6757d0d49e6b206cb

  • SHA512

    71178a582290ae84fb214d1d5d54a510f5593ced87f9071079b3ae72ee28d34cd7b383bead546bc9e4b1b54832d3c4d253bfed732082bf9c19334ccaca59232b

  • SSDEEP

    3072:OeSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLLwEl0:OVYrJrOSsRwcp+

Score
8/10
upx

Malware Config

Targets

    • Target

      451c2ccd160c615e916013b70d4ab8d3

    • Size

      123KB

    • MD5

      451c2ccd160c615e916013b70d4ab8d3

    • SHA1

      670a8e414ebfd8482eca3cf588d42824ef6d24c7

    • SHA256

      6af6c46ca733bfbce769a89a625b3c699d90a8876cf509b6757d0d49e6b206cb

    • SHA512

      71178a582290ae84fb214d1d5d54a510f5593ced87f9071079b3ae72ee28d34cd7b383bead546bc9e4b1b54832d3c4d253bfed732082bf9c19334ccaca59232b

    • SSDEEP

      3072:OeSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLLwEl0:OVYrJrOSsRwcp+

    Score
    8/10
    upx

    • Manipulates Digital Signatures

      Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks