General

  • Target

    dcordx64.exe

  • Size

    202.5MB

  • Sample

    240410-q3xt2shg84

  • MD5

    2495dc6c5aef5d0c31e2907e956a244f

  • SHA1

    7c75bea4c0448ec937df522facf866a2e4619f96

  • SHA256

    1bd7e4389963e3abed253ee9314e4039470a77ba863e35883770046d307a8f03

  • SHA512

    07d5ce56797e33eea4bc8cca29fe5cda8c847770ea4396928dcdf081a0d6ef93fc0889c2c82773128e456f7857ecef71a3868a7c274b1b309bacac50b135a56c

  • SSDEEP

    6291456:n9ug4T7Y8OFAWOJv+ju37gv3gnVaJZoFAjPB0s1Ok3KMw6iX:994T7YZsJWjjyeIAj9Ok6M8

Score
7/10
upx

Malware Config

Targets

    • Target

      dcordx64.exe

    • Size

      202.5MB

    • MD5

      2495dc6c5aef5d0c31e2907e956a244f

    • SHA1

      7c75bea4c0448ec937df522facf866a2e4619f96

    • SHA256

      1bd7e4389963e3abed253ee9314e4039470a77ba863e35883770046d307a8f03

    • SHA512

      07d5ce56797e33eea4bc8cca29fe5cda8c847770ea4396928dcdf081a0d6ef93fc0889c2c82773128e456f7857ecef71a3868a7c274b1b309bacac50b135a56c

    • SSDEEP

      6291456:n9ug4T7Y8OFAWOJv+ju37gv3gnVaJZoFAjPB0s1Ok3KMw6iX:994T7YZsJWjjyeIAj9Ok6M8

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks