Overview

overview

7

Static

static

7

87ffd37438...3d.exe

windows7-x64

7

87ffd37438...3d.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    87ffd374382d39f3a1eb52df15f9ab3d

  • Size

    16KB

  • Sample

    240201-3yya8shab5

  • MD5

    87ffd374382d39f3a1eb52df15f9ab3d

  • SHA1

    993e31911d07c210c5c88da367bb84db3fb0df57

  • SHA256

    bd21109e054c5e64e1d1a6eb7a4c12712b89597d19e1eb7eedda723d38de4e16

  • SHA512

    f76b025df4a0336e8e55b488634283121ed5c78abd5cbfe92f2cc143999da618223c45b8d458f7c79ab04607f3943d1ee5ce96c0d1b3f0124cc73dfc0edcafcb

  • SSDEEP

    384:JLrBu+nZPXneVI+pv02ckIYXULtGqgkoiCyir2y6W0R:5FhnL+pvJbREcliNiaL

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      87ffd374382d39f3a1eb52df15f9ab3d

    • Size

      16KB

    • MD5

      87ffd374382d39f3a1eb52df15f9ab3d

    • SHA1

      993e31911d07c210c5c88da367bb84db3fb0df57

    • SHA256

      bd21109e054c5e64e1d1a6eb7a4c12712b89597d19e1eb7eedda723d38de4e16

    • SHA512

      f76b025df4a0336e8e55b488634283121ed5c78abd5cbfe92f2cc143999da618223c45b8d458f7c79ab04607f3943d1ee5ce96c0d1b3f0124cc73dfc0edcafcb

    • SSDEEP

      384:JLrBu+nZPXneVI+pv02ckIYXULtGqgkoiCyir2y6W0R:5FhnL+pvJbREcliNiaL

    Score
    7/10
    persistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Registers COM server for autorun

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks