Overview

overview

8

Static

static

7

9c070b36fe...f8.exe

windows7-x64

8

9c070b36fe...f8.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    9c070b36fe8f1da9f69e3442ef47faf8

  • Size

    517KB

  • Sample

    240214-svbmysec51

  • MD5

    9c070b36fe8f1da9f69e3442ef47faf8

  • SHA1

    3b41b6e029cc9a55a82a95e4f2f5b10b797d4e56

  • SHA256

    5ffcbf7f98d24ade6186f880e40ddbb00db696ed150e036381fe4f1221ba7cab

  • SHA512

    8e441635c802a3251e47ae96e8606f9f01cbe85d340ef2da9ec03cd859f6783654641c335597a711281bc26c44217e2e29483e4d4b83fdbc67251dfba68a4e86

  • SSDEEP

    6144:lp1vd5qewqdHaQ3AbN/0ZOJxlVPzGyPCJxP6BT8HpJvp7aUDoSDWzHgFDbpLtvvQ:ljvBB0Q4/bxlFJPCJDjRWmoSAgF5

Score
8/10
upx

Malware Config

Targets

    • Target

      9c070b36fe8f1da9f69e3442ef47faf8

    • Size

      517KB

    • MD5

      9c070b36fe8f1da9f69e3442ef47faf8

    • SHA1

      3b41b6e029cc9a55a82a95e4f2f5b10b797d4e56

    • SHA256

      5ffcbf7f98d24ade6186f880e40ddbb00db696ed150e036381fe4f1221ba7cab

    • SHA512

      8e441635c802a3251e47ae96e8606f9f01cbe85d340ef2da9ec03cd859f6783654641c335597a711281bc26c44217e2e29483e4d4b83fdbc67251dfba68a4e86

    • SSDEEP

      6144:lp1vd5qewqdHaQ3AbN/0ZOJxlVPzGyPCJxP6BT8HpJvp7aUDoSDWzHgFDbpLtvvQ:ljvBB0Q4/bxlFJPCJDjRWmoSAgF5

    Score
    8/10
    upx

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks