Overview

overview

7

Static

static

7

7fc60a9065...c3.exe

windows7-x64

7

7fc60a9065...c3.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    7fc60a9065af29fe06046517ef036cc3

  • Size

    68KB

  • Sample

    240129-n3w7eaafhm

  • MD5

    7fc60a9065af29fe06046517ef036cc3

  • SHA1

    d3227ba14f0ccf68d57c5b7797eabe63007d3886

  • SHA256

    25ee8c533c8fedb4ba869f59eef73731c5fa80c63c1d2a671974b25e37930361

  • SHA512

    6df576451045e0c071b2d528e026e90a796415501c392d5dd552f208431da365ad30d2b31a812ca24d320f44baa697b4826dd25ebce65f151c67ee13da7688e4

  • SSDEEP

    768:ERJCq0PiIw6Sz96Bmp1nI/2gM209AjS9sHC:ERDPI8z0l+WjSmH

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      7fc60a9065af29fe06046517ef036cc3

    • Size

      68KB

    • MD5

      7fc60a9065af29fe06046517ef036cc3

    • SHA1

      d3227ba14f0ccf68d57c5b7797eabe63007d3886

    • SHA256

      25ee8c533c8fedb4ba869f59eef73731c5fa80c63c1d2a671974b25e37930361

    • SHA512

      6df576451045e0c071b2d528e026e90a796415501c392d5dd552f208431da365ad30d2b31a812ca24d320f44baa697b4826dd25ebce65f151c67ee13da7688e4

    • SSDEEP

      768:ERJCq0PiIw6Sz96Bmp1nI/2gM209AjS9sHC:ERDPI8z0l+WjSmH

    Score
    7/10
    persistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks