Overview

overview

7

Static

static

3

7b1aa0d5bc...74.exe

windows7-x64

7

7b1aa0d5bc...74.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7b1aa0d5bc23aabaf2cf783e63962a74

  • Size

    1.4MB

  • Sample

    240127-ycz6gsafg4

  • MD5

    7b1aa0d5bc23aabaf2cf783e63962a74

  • SHA1

    0b61c20c0c0fccdf907e9cb00917333b2942d1fe

  • SHA256

    c6101dc8921e8fa2c29cbc989d6b5222892c0b22d0a5dfb9044399b55f58f142

  • SHA512

    1d9f1c3a8b037bc00750dbab15336ef3a61efea787ac6196e45c904d7608a7529aac307fad28a443867800284888fcf87f967d1d03c16d58d56cbc4093bf4032

  • SSDEEP

    24576:jJpz4Yttj8MhRf0R4f5LRb7+P1uSQgiG5y2ny48f30RHFJm6dff++ee0sJZDH:jYYzHxLRb7+P/zdysy9/4FJNQuDH

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      7b1aa0d5bc23aabaf2cf783e63962a74

    • Size

      1.4MB

    • MD5

      7b1aa0d5bc23aabaf2cf783e63962a74

    • SHA1

      0b61c20c0c0fccdf907e9cb00917333b2942d1fe

    • SHA256

      c6101dc8921e8fa2c29cbc989d6b5222892c0b22d0a5dfb9044399b55f58f142

    • SHA512

      1d9f1c3a8b037bc00750dbab15336ef3a61efea787ac6196e45c904d7608a7529aac307fad28a443867800284888fcf87f967d1d03c16d58d56cbc4093bf4032

    • SSDEEP

      24576:jJpz4Yttj8MhRf0R4f5LRb7+P1uSQgiG5y2ny48f30RHFJm6dff++ee0sJZDH:jYYzHxLRb7+P/zdysy9/4FJNQuDH

    Score
    7/10
    persistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks