Overview

overview

7

Static

static

7

aa836358c3...78.exe

windows7-x64

7

aa836358c3...78.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa836358c35432f7d6eaccfe50c93c78

  • Size

    1.1MB

  • Sample

    240228-akfvtaeh6y

  • MD5

    aa836358c35432f7d6eaccfe50c93c78

  • SHA1

    f8ead8ea850d2d7f41640071ba5a58f91e7756ef

  • SHA256

    7673de9d8c302ed416a4a779cb7a6aedcc298fbc5dcf05550bd39a1b61f41e44

  • SHA512

    2f663bdf1290ff7f54117188f8c46eda70d81f5b7519e98b311e01d016f5ecf7bad807de4c17f27673fc57328cd8427a49c23df6c719b629d95d55c6391bf891

  • SSDEEP

    24576:t8Q9v39St5n1PP3HsdMBh5X6oKuMrlKl4zS:r9PMPP3H6Aiz

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      aa836358c35432f7d6eaccfe50c93c78

    • Size

      1.1MB

    • MD5

      aa836358c35432f7d6eaccfe50c93c78

    • SHA1

      f8ead8ea850d2d7f41640071ba5a58f91e7756ef

    • SHA256

      7673de9d8c302ed416a4a779cb7a6aedcc298fbc5dcf05550bd39a1b61f41e44

    • SHA512

      2f663bdf1290ff7f54117188f8c46eda70d81f5b7519e98b311e01d016f5ecf7bad807de4c17f27673fc57328cd8427a49c23df6c719b629d95d55c6391bf891

    • SSDEEP

      24576:t8Q9v39St5n1PP3HsdMBh5X6oKuMrlKl4zS:r9PMPP3H6Aiz

    Score
    7/10
    persistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks