General

  • Target

    86c37dba105686e109738afe5f5d511a

  • Size

    283KB

  • Sample

    240201-nemcasdhbl

  • MD5

    86c37dba105686e109738afe5f5d511a

  • SHA1

    ece979753c8481ff7933216b8e1997e268e71dbb

  • SHA256

    4f6a154f03609705faec46aab8ab859eb61e1736f1c04737461c85a3f177af6e

  • SHA512

    ee3657b38ea2e9e89a0e04c0dd036ba05efc5649103e228e02e29818997ade780e393788105fda8b8ec82888de71cf5e50aeea1497a50aadf93c36ae043836a1

  • SSDEEP

    6144:zpEt3vKlRQrCYnd3oSor2wj4yIUG1sUiVS9:z+tfwNYnhoSor2zRWVg

Score
8/10
upx

Malware Config

Targets

    • Target

      86c37dba105686e109738afe5f5d511a

    • Size

      283KB

    • MD5

      86c37dba105686e109738afe5f5d511a

    • SHA1

      ece979753c8481ff7933216b8e1997e268e71dbb

    • SHA256

      4f6a154f03609705faec46aab8ab859eb61e1736f1c04737461c85a3f177af6e

    • SHA512

      ee3657b38ea2e9e89a0e04c0dd036ba05efc5649103e228e02e29818997ade780e393788105fda8b8ec82888de71cf5e50aeea1497a50aadf93c36ae043836a1

    • SSDEEP

      6144:zpEt3vKlRQrCYnd3oSor2wj4yIUG1sUiVS9:z+tfwNYnhoSor2zRWVg

    Score
    8/10
    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks