General

  • Target

    22f7af55ed7e0c415d975dc08e3c14dfd50c1ee9ea50ce5fd384e59037b256eb

  • Size

    185KB

  • Sample

    240408-x4y7tscg71

  • MD5

    a261cf8663fab2ffe25635b4c4fbc08e

  • SHA1

    631754cd8e0b45dcb187ce6be9f5c5a2c2a13861

  • SHA256

    22f7af55ed7e0c415d975dc08e3c14dfd50c1ee9ea50ce5fd384e59037b256eb

  • SHA512

    b0a4687d83239ef7198ad9a82b6ddb450b044ddbca8a83c1e30132094933558561d98750b8087c785ede18890750e402093ddb393d45048f57774297bb9eb369

  • SSDEEP

    3072:ddEUfKj8BYbDiC1ZTK7sxtLUIGT9kXH0hga4PjBy2e:dUSiZTK40V2a4PdyF

Score
10/10
upx

Malware Config

Targets

    • Target

      22f7af55ed7e0c415d975dc08e3c14dfd50c1ee9ea50ce5fd384e59037b256eb

    • Size

      185KB

    • MD5

      a261cf8663fab2ffe25635b4c4fbc08e

    • SHA1

      631754cd8e0b45dcb187ce6be9f5c5a2c2a13861

    • SHA256

      22f7af55ed7e0c415d975dc08e3c14dfd50c1ee9ea50ce5fd384e59037b256eb

    • SHA512

      b0a4687d83239ef7198ad9a82b6ddb450b044ddbca8a83c1e30132094933558561d98750b8087c785ede18890750e402093ddb393d45048f57774297bb9eb369

    • SSDEEP

      3072:ddEUfKj8BYbDiC1ZTK7sxtLUIGT9kXH0hga4PjBy2e:dUSiZTK40V2a4PdyF

    Score
    9/10
    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks