Overview

overview

10

Static

static

3

7a06702c47...03.exe

windows7-x64

10

7a06702c47...03.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7a06702c475b5c6770c39e7a7dcecb03

  • Size

    353KB

  • Sample

    240127-msna3saef2

  • MD5

    7a06702c475b5c6770c39e7a7dcecb03

  • SHA1

    edef0eec856fa0958fbeafd7aeb11bd7cfc34ce6

  • SHA256

    51c6045e6f03360ad3a7fa6e90130a2d99a9c5e8b6fd90b99b7397efe99c608b

  • SHA512

    0a557506ff916d31e7b0ba5209da28acb220652c4d2c5f48eef1ebd1579f62539d82b25b21ced556775f7d4a3ebbcf95cbcea6bcc6dd4c791079bcc7045e5aed

  • SSDEEP

    6144:0PxNrQT00aDR86u7Z2q6QUZiXXHfBK4qSP/8TszygU8tTBNACKbul9hdUXsQl6He:0De00OGZF6QUZiXX9/PAQyh8tUC5lTdM

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      7a06702c475b5c6770c39e7a7dcecb03

    • Size

      353KB

    • MD5

      7a06702c475b5c6770c39e7a7dcecb03

    • SHA1

      edef0eec856fa0958fbeafd7aeb11bd7cfc34ce6

    • SHA256

      51c6045e6f03360ad3a7fa6e90130a2d99a9c5e8b6fd90b99b7397efe99c608b

    • SHA512

      0a557506ff916d31e7b0ba5209da28acb220652c4d2c5f48eef1ebd1579f62539d82b25b21ced556775f7d4a3ebbcf95cbcea6bcc6dd4c791079bcc7045e5aed

    • SSDEEP

      6144:0PxNrQT00aDR86u7Z2q6QUZiXXHfBK4qSP/8TszygU8tTBNACKbul9hdUXsQl6He:0De00OGZF6QUZiXX9/PAQyh8tUC5lTdM

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Adds policy Run key to start application

      persistence

    • Modifies Installed Components in the registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks