Overview

overview

8

Static

static

3

dfe030bea8...a9.exe

windows7-x64

8

dfe030bea8...a9.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    dfe030bea8ab450de0dafe5c2b255ba9

  • Size

    656KB

  • Sample

    240326-xplm7ahf68

  • MD5

    dfe030bea8ab450de0dafe5c2b255ba9

  • SHA1

    f0c9c900fcf48bceb63b6741ba92591429b66c8d

  • SHA256

    f8121aac8ac9337cc4fd3faded52b430f1a88762f60e7d7e6090e0eb2a76c1cf

  • SHA512

    6b8a70c68727cbba410f20350ce152b4d6c73833642ea6c09fb9ce89348b558eb0aba3502975f55144b77652ad4eece0493049e230196b6f4db86602eb607060

  • SSDEEP

    12288:G9fFdGJ6M3Wm0dOoawkPLTz1AzhkENzt0Mgtp61DmRx:IfF0ofa5Tz/EFawDA

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      dfe030bea8ab450de0dafe5c2b255ba9

    • Size

      656KB

    • MD5

      dfe030bea8ab450de0dafe5c2b255ba9

    • SHA1

      f0c9c900fcf48bceb63b6741ba92591429b66c8d

    • SHA256

      f8121aac8ac9337cc4fd3faded52b430f1a88762f60e7d7e6090e0eb2a76c1cf

    • SHA512

      6b8a70c68727cbba410f20350ce152b4d6c73833642ea6c09fb9ce89348b558eb0aba3502975f55144b77652ad4eece0493049e230196b6f4db86602eb607060

    • SSDEEP

      12288:G9fFdGJ6M3Wm0dOoawkPLTz1AzhkENzt0Mgtp61DmRx:IfF0ofa5Tz/EFawDA

    Score
    8/10
    persistenceupx

    • Adds policy Run key to start application

      persistence

    • Modifies Installed Components in the registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks