General

  • Target

    7bc7b7eedab2c54160dc8b924dd8b21a

  • Size

    43KB

  • Sample

    240128-bm22hahhhn

  • MD5

    7bc7b7eedab2c54160dc8b924dd8b21a

  • SHA1

    79fa5a9c92c9f16700f3e62c24f85c4df905ed16

  • SHA256

    a387ae31984a0a16fb261c24c95dd24aa6d68aeead270dea99696fd6e4dd7e2d

  • SHA512

    6d31cf95118771837fc73f8ceff4b0a5902a8dbb8fb9bc051c4db7256ac59206cebe2f3421691dec796b0d4de3c5ad720ea1e08aab49faee371b927ff5637bdd

  • SSDEEP

    768:VvGUubdwHyyWbnQpcvvibQUet1NTx/C07GPd:VuDKyBb4cvvibQbtbxq2GPd

Score
7/10
upx

Malware Config

Targets

    • Target

      7bc7b7eedab2c54160dc8b924dd8b21a

    • Size

      43KB

    • MD5

      7bc7b7eedab2c54160dc8b924dd8b21a

    • SHA1

      79fa5a9c92c9f16700f3e62c24f85c4df905ed16

    • SHA256

      a387ae31984a0a16fb261c24c95dd24aa6d68aeead270dea99696fd6e4dd7e2d

    • SHA512

      6d31cf95118771837fc73f8ceff4b0a5902a8dbb8fb9bc051c4db7256ac59206cebe2f3421691dec796b0d4de3c5ad720ea1e08aab49faee371b927ff5637bdd

    • SSDEEP

      768:VvGUubdwHyyWbnQpcvvibQUet1NTx/C07GPd:VuDKyBb4cvvibQbtbxq2GPd

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks