General

  • Target

    669c41691f628424722651b1dbd079c9

  • Size

    325KB

  • Sample

    240119-d946gsebhm

  • MD5

    669c41691f628424722651b1dbd079c9

  • SHA1

    4196786ba595c0c9ea79bead7b6eb5335a53441a

  • SHA256

    fd0022b55d346abf966283a43864b860bd75e097316964aad4d3b5bcc87b58e0

  • SHA512

    1f9df123c21610939b377968f6fc6c85a0885d3a57ac7224a4b7a946a8203c9ff3dec827dc13c7d7d5ee698da822230cbe900fd21d51dc7c2bd9c01035e9f63b

  • SSDEEP

    6144:geMr4iPbCfiwn/WZwkYVKzJIfEs4c9SnedF8q1eid97ZUThypkIczUmqMGl0oI:gpUvWZ4kWcNeTdGhuwUmOK

Score
7/10
upx

Malware Config

Targets

    • Target

      i_isrc2003.exe

    • Size

      328KB

    • MD5

      28b9d04c0164929621d66280a1c2f719

    • SHA1

      2405df597fe72d756836b35260d9c5a089346379

    • SHA256

      b567f894dd25be0fda0fa804f9b4aceefd75f9d1d384a61de8ded9863be67394

    • SHA512

      3527e6eccda30b4935f65a4266f5574622af837f3f47334e33ffd4b8022b0cde104a8c9bcb928b9b6c5f177e9f6638e3576be5c3a304817a5fd902a4fc486c61

    • SSDEEP

      6144:POwTUYAXOsusu+gRX8L2OAcoU6MWMwVuQydv1s4Cwl80OyN:PrVAXO75RAtLoUioq4z+1O

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      新云软件.url

    • Size

      261B

    • MD5

      af534adca72cbb40fcaba6adcf4aa0b3

    • SHA1

      486f64259c45baf815004b6ffc65301e82aecdee

    • SHA256

      1bbc2bfe53979f537c179995a1d1b5030db3ad6f2e46b258421506a3fb0fc296

    • SHA512

      21d4b21c0d228498275640b397e8adfcb92dca4996cb59b035eeea523c5fd0594b0c8bc66d557265343bf6e7cb35350790fcac323db841c0cd4fea6da38b70b1

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks