General

  • Target

    8b686c3a77bd7cb28e6c077b14a0a1ca

  • Size

    2.7MB

  • Sample

    240203-e623dsbgcp

  • MD5

    8b686c3a77bd7cb28e6c077b14a0a1ca

  • SHA1

    895b9a08cfa0dba724ca10abb8bb44e1c0ee01f8

  • SHA256

    78a31f04da9de33782cd8d4e90cad6c64d4d9bb55fceeddebc118fc330d48c1f

  • SHA512

    ae0d853aa1e688e604ee444b29e9e70168bad59a3363dff312508e7f60754cd0d88cbc7fe762081bcbff2f2e55a0d85594783a13143f1a89476f8bfd6bedb381

  • SSDEEP

    49152:r4l5QTlehtatD/meYjG44ue2tCEcz74tm5QcWKC17HmU2+mHYOwXE5O2KNFv:EgTl2tatiabueAhczpQKubt2+mY1X+KP

Score
7/10
upx

Malware Config

Targets

    • Target

      ImageX/ImageX_One_Key_x86_x64_090819.exe

    • Size

      2.8MB

    • MD5

      4dca079479e580493ab31e819307c083

    • SHA1

      e2687cc32285b73df522b5b817ad89f2e6ccfaa2

    • SHA256

      ff9f15dbfc5966481d285557482b78f8a6606b66142c72ad865ce33b1084c9bc

    • SHA512

      d8338b5cb5e25e9ee60c36a60a837086bc31ecfbf4ffa5ff8106ebb72b706bd54028ddc8d0f30f7a61b19f46f68b43bb22e04a2363a7f97ea47b4cd3b8166bf6

    • SSDEEP

      49152:hTC4uOVcY6JLmSUAsK2kqk8IUgfzuuRTV2EDKMbOvUYupemv1qoBoClNh7XNf:h+a6JLFU/K2kqkNRRTV2EhGUYgHvUahF

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      ImageX/新云软件.url

    • Size

      133B

    • MD5

      4f0017b3b346bd0626f0c3b915e6e734

    • SHA1

      823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92

    • SHA256

      df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678

    • SHA512

      0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks