Overview

overview

7

Static

static

7

A-Ray Scanner.rar

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    A-Ray Scanner.rar

  • Size

    349KB

  • Sample

    240309-lee7wafd71

  • MD5

    83e22240350c24d51489a3006263b9e7

  • SHA1

    88c868ba08e64658fa8c9ba5f61a9aad85a1110e

  • SHA256

    d910ea0cb397c8a95190ade8076b618e4736e79d32b1f95a9a039134399ea109

  • SHA512

    37d57a4a65cd1c95c6f3081f87b29e4f8b6b940c09e5864fe65302f82d747ffa15712a3d943f9a8de8a9418fede762b140641e28dff7ec9f8b617afab94f65eb

  • SSDEEP

    6144:ZR7CNam5g3S+o5M4pmTUsW9ifDZ3UoXUz6mNrWks4s/8FYnqhr:ZReNaCP+opmTU7YDNUl6mNV/s0vd

Score
7/10
upx

Malware Config

Targets

    • Target

      A-Ray Scanner.rar

    • Size

      349KB

    • MD5

      83e22240350c24d51489a3006263b9e7

    • SHA1

      88c868ba08e64658fa8c9ba5f61a9aad85a1110e

    • SHA256

      d910ea0cb397c8a95190ade8076b618e4736e79d32b1f95a9a039134399ea109

    • SHA512

      37d57a4a65cd1c95c6f3081f87b29e4f8b6b940c09e5864fe65302f82d747ffa15712a3d943f9a8de8a9418fede762b140641e28dff7ec9f8b617afab94f65eb

    • SSDEEP

      6144:ZR7CNam5g3S+o5M4pmTUsW9ifDZ3UoXUz6mNrWks4s/8FYnqhr:ZReNaCP+opmTU7YDNUl6mNV/s0vd

    Score
    7/10
    upx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks