General

  • Target

    66fe0ec9346e752c0adc027608fdefea

  • Size

    268KB

  • Sample

    240119-hvj9zsheh6

  • MD5

    66fe0ec9346e752c0adc027608fdefea

  • SHA1

    c60ad2b57eab100471d845303e4d5d7941c56f16

  • SHA256

    ef6203fd40e3bea59c96371fd27b7c8f261c1a7fe33d0d4c55b23dfd55606fb9

  • SHA512

    3f970998be0a92e21feaaac27433dbb379e557aaab5419b70951e6e118ca7dc79efdac3b0f5384266cbe81cf6f0c1aa1c8a60247961d1136d5b0b00551434b06

  • SSDEEP

    6144:oftdcNdPSPeftdcNdPCftdcNdPYNSDyDIkFthp:bdPSPFdPZdPcSDyTFtj

Score
7/10
upx

Malware Config

Targets

    • Target

      66fe0ec9346e752c0adc027608fdefea

    • Size

      268KB

    • MD5

      66fe0ec9346e752c0adc027608fdefea

    • SHA1

      c60ad2b57eab100471d845303e4d5d7941c56f16

    • SHA256

      ef6203fd40e3bea59c96371fd27b7c8f261c1a7fe33d0d4c55b23dfd55606fb9

    • SHA512

      3f970998be0a92e21feaaac27433dbb379e557aaab5419b70951e6e118ca7dc79efdac3b0f5384266cbe81cf6f0c1aa1c8a60247961d1136d5b0b00551434b06

    • SSDEEP

      6144:oftdcNdPSPeftdcNdPCftdcNdPYNSDyDIkFthp:bdPSPFdPZdPcSDyTFtj

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks