Overview

overview

10

Static

static

10

bbebd3a066...65.exe

windows7-x64

9

bbebd3a066...65.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    bbebd3a066b4868d1364005891e673118f33d092c1400e14b09e702de37f1d65

  • Size

    55KB

  • Sample

    240416-bxyrtsfh2t

  • MD5

    13bad1cfb7b253b22357b5bbe6f1b342

  • SHA1

    672004fcf70d27b5f23df3318523dc64a939fa0b

  • SHA256

    bbebd3a066b4868d1364005891e673118f33d092c1400e14b09e702de37f1d65

  • SHA512

    39180de5656389c34fb7f57bcc5962770fa4bb431488c9d24f86139fe9cf768bc1ca319c8cc2f36eaf5b4fa7872a471f9516d1789e339c305e8e2cbb9f211ecd

  • SSDEEP

    1536:XhBZ1b9c409y1G1i35Bo01i/gcU8eVTOK/YqjYYamvbtb:vZl2zox91i/NU82OMYcYYamv5b

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      bbebd3a066b4868d1364005891e673118f33d092c1400e14b09e702de37f1d65

    • Size

      55KB

    • MD5

      13bad1cfb7b253b22357b5bbe6f1b342

    • SHA1

      672004fcf70d27b5f23df3318523dc64a939fa0b

    • SHA256

      bbebd3a066b4868d1364005891e673118f33d092c1400e14b09e702de37f1d65

    • SHA512

      39180de5656389c34fb7f57bcc5962770fa4bb431488c9d24f86139fe9cf768bc1ca319c8cc2f36eaf5b4fa7872a471f9516d1789e339c305e8e2cbb9f211ecd

    • SSDEEP

      1536:XhBZ1b9c409y1G1i35Bo01i/gcU8eVTOK/YqjYYamvbtb:vZl2zox91i/NU82OMYcYYamv5b

    Score
    9/10
    persistenceupx

    • UPX dump on OEP (original entry point)

    • Modifies Installed Components in the registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks