Overview

overview

8

Static

static

3

b62a19c414...71.exe

windows7-x64

8

b62a19c414...71.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    b62a19c41465824ce9feb8d922517871

  • Size

    8.0MB

  • Sample

    240306-bs4ghsgc34

  • MD5

    b62a19c41465824ce9feb8d922517871

  • SHA1

    a4fb07a6c622828c19120d02b1e12eb31091f821

  • SHA256

    aade72094b5aebbcf8f18188440d9735f96a8b7a174b28cc79c54e26895cb3d7

  • SHA512

    738b44afd4dff1ab0f16c04ca918edd82f49701628db7c92043483f654848e3720b2bce8188ae5238332f80ea49ea2181621376af753cebf0a63f9f851d13024

  • SSDEEP

    196608:EgIu1EUlK+OJujlly89WuLRk23n+xYvZgm:HcUXOJuB7RBn+K+m

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      b62a19c41465824ce9feb8d922517871

    • Size

      8.0MB

    • MD5

      b62a19c41465824ce9feb8d922517871

    • SHA1

      a4fb07a6c622828c19120d02b1e12eb31091f821

    • SHA256

      aade72094b5aebbcf8f18188440d9735f96a8b7a174b28cc79c54e26895cb3d7

    • SHA512

      738b44afd4dff1ab0f16c04ca918edd82f49701628db7c92043483f654848e3720b2bce8188ae5238332f80ea49ea2181621376af753cebf0a63f9f851d13024

    • SSDEEP

      196608:EgIu1EUlK+OJujlly89WuLRk23n+xYvZgm:HcUXOJuB7RBn+K+m

    Score
    8/10
    persistenceupx

    • Modifies Installed Components in the registry

      persistence

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks