Overview

overview

7

Static

static

7

9703bfbf21...2c.exe

windows7-x64

7

9703bfbf21...2c.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9703bfbf2193f74c2a9657da6a712f2c

  • Size

    1.3MB

  • Sample

    240212-m9x7lsdd97

  • MD5

    9703bfbf2193f74c2a9657da6a712f2c

  • SHA1

    98d6a8f91eb0391c56f958acd3d5b7c2b806fd1a

  • SHA256

    cffd3fd4c116eb56dea4b7980ac4a2e7be07944a182eddaa983ecdd2e5a7b79e

  • SHA512

    7f189652ff71aa9dd71e8115a798cab591c50e291f59703a3f57d576e7cffd1f027bf435ab674a850af79a3dfc6d92899489b06f671017a72af1cb536c19d0d8

  • SSDEEP

    24576:xE+/9mM4YahIyZzRD4JCle1Jar1kNYTxrlxTwIhQDiysu3IrAj/Xt:i+/9ShIytRD4sle1JUeYTHZwIhpo3+0X

Score
7/10
evasionupx

Malware Config

Targets

    • Target

      9703bfbf2193f74c2a9657da6a712f2c

    • Size

      1.3MB

    • MD5

      9703bfbf2193f74c2a9657da6a712f2c

    • SHA1

      98d6a8f91eb0391c56f958acd3d5b7c2b806fd1a

    • SHA256

      cffd3fd4c116eb56dea4b7980ac4a2e7be07944a182eddaa983ecdd2e5a7b79e

    • SHA512

      7f189652ff71aa9dd71e8115a798cab591c50e291f59703a3f57d576e7cffd1f027bf435ab674a850af79a3dfc6d92899489b06f671017a72af1cb536c19d0d8

    • SSDEEP

      24576:xE+/9mM4YahIyZzRD4JCle1Jar1kNYTxrlxTwIhQDiysu3IrAj/Xt:i+/9ShIytRD4sle1JUeYTHZwIhpo3+0X

    Score
    7/10
    evasionupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks