Overview

overview

10

Static

static

3

1bbd1a1ffa...68.exe

windows7-x64

10

1bbd1a1ffa...68.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1bbd1a1ffaab13b7d54822fbd0087d68

  • Size

    11KB

  • Sample

    240409-1g6j6sce37

  • MD5

    1bbd1a1ffaab13b7d54822fbd0087d68

  • SHA1

    0301d2b6539d6725e8bd069183a95d3e0336e4e7

  • SHA256

    d94711e06770fc56485e14061b63d21184a0a3c4677ad25d28c1485133328015

  • SHA512

    3990a72ceb7165debb86266035dd3f0aa6db504bc550bb2c2a5507684c4c30880ba83d1a57a2cdf70ff03b88b85cbd71ca5c5b19369191ffc7736d87b1b2d33c

  • SSDEEP

    192:9mUWKs/gonKfzSh8cjPUN1DFpIWpoqZy2u2LTsd4p9gX+yHjqcz4lBUCLXBAm2SA:6K+ggKfzQ8YPUN1DFGWmqo2uQ/DguiLf

Score
10/10
upatredownloader

Malware Config

Targets

    • Target

      1bbd1a1ffaab13b7d54822fbd0087d68

    • Size

      11KB

    • MD5

      1bbd1a1ffaab13b7d54822fbd0087d68

    • SHA1

      0301d2b6539d6725e8bd069183a95d3e0336e4e7

    • SHA256

      d94711e06770fc56485e14061b63d21184a0a3c4677ad25d28c1485133328015

    • SHA512

      3990a72ceb7165debb86266035dd3f0aa6db504bc550bb2c2a5507684c4c30880ba83d1a57a2cdf70ff03b88b85cbd71ca5c5b19369191ffc7736d87b1b2d33c

    • SSDEEP

      192:9mUWKs/gonKfzSh8cjPUN1DFpIWpoqZy2u2LTsd4p9gX+yHjqcz4lBUCLXBAm2SA:6K+ggKfzQ8YPUN1DFGWmqo2uQ/DguiLf

    Score
    10/10
    upatredownloader

    • Upatre

      Upatre is a generic malware downloader.

      downloaderupatre

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks