Overview

overview

7

Static

static

7

b7f6cbbe68...d5.exe

windows7-x64

7

b7f6cbbe68...d5.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b7f6cbbe68d2d92b0721408708c37dd5

  • Size

    126KB

  • Sample

    240306-v1kh6aed71

  • MD5

    b7f6cbbe68d2d92b0721408708c37dd5

  • SHA1

    9ce99e33a1a4e161bb2b6fb99003f79d9778fc59

  • SHA256

    529365d7e6520ef2d812fc361a135d910d639a6468d0203fcddf6e0819661832

  • SHA512

    a9aec2fe83a9ef871cc3b94ce53c9ec52e1df736847cb4a0f0ecdea36a2d28a637ceb124a812f081ffeac8607e9263312ae203cd2f5a36101f819a93f673f360

  • SSDEEP

    3072:dDKERFTYi2rQULKl6hp1fD4JQONLKcvM3/BLBvout2s:FKERFTYi2s6Kl+DbOdDvM35LxoS2

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      b7f6cbbe68d2d92b0721408708c37dd5

    • Size

      126KB

    • MD5

      b7f6cbbe68d2d92b0721408708c37dd5

    • SHA1

      9ce99e33a1a4e161bb2b6fb99003f79d9778fc59

    • SHA256

      529365d7e6520ef2d812fc361a135d910d639a6468d0203fcddf6e0819661832

    • SHA512

      a9aec2fe83a9ef871cc3b94ce53c9ec52e1df736847cb4a0f0ecdea36a2d28a637ceb124a812f081ffeac8607e9263312ae203cd2f5a36101f819a93f673f360

    • SSDEEP

      3072:dDKERFTYi2rQULKl6hp1fD4JQONLKcvM3/BLBvout2s:FKERFTYi2s6Kl+DbOdDvM35LxoS2

    Score
    7/10
    persistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks