Overview

overview

10

Static

static

10

68d0aa9c82...ab.exe

windows7-x64

9

68d0aa9c82...ab.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    68d0aa9c8201b7cf6e10d03731d31ac6e063ed3c07dd0edb4ef8108f58d7ccab

  • Size

    137KB

  • Sample

    240408-1t6eyada26

  • MD5

    913f8f8135483ee07a0bae74b4f54bc0

  • SHA1

    18fd90fb7712a660048ab8b3ef93e77bdd447557

  • SHA256

    68d0aa9c8201b7cf6e10d03731d31ac6e063ed3c07dd0edb4ef8108f58d7ccab

  • SHA512

    c2dbf280eab6924552a72c50455eeb5874108ed003c17c4bc46bb84c1e1f289761db46bc53aee07217b41ea7f5284c7631f4b2f3079776aeee79aa378cebace5

  • SSDEEP

    3072:jdEUfKj8BYbDiC1ZTK7sxtLUIGf7fKCibr:jUSiZTK40PfKCibr

Score
10/10
upx

Malware Config

Targets

    • Target

      68d0aa9c8201b7cf6e10d03731d31ac6e063ed3c07dd0edb4ef8108f58d7ccab

    • Size

      137KB

    • MD5

      913f8f8135483ee07a0bae74b4f54bc0

    • SHA1

      18fd90fb7712a660048ab8b3ef93e77bdd447557

    • SHA256

      68d0aa9c8201b7cf6e10d03731d31ac6e063ed3c07dd0edb4ef8108f58d7ccab

    • SHA512

      c2dbf280eab6924552a72c50455eeb5874108ed003c17c4bc46bb84c1e1f289761db46bc53aee07217b41ea7f5284c7631f4b2f3079776aeee79aa378cebace5

    • SSDEEP

      3072:jdEUfKj8BYbDiC1ZTK7sxtLUIGf7fKCibr:jUSiZTK40PfKCibr

    Score
    9/10
    upx

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks