General

  • Target

    5f5df9c28a22a548658780448bd6aa83cde28818f7873423dfa10036f8ab6e4f

  • Size

    266KB

  • Sample

    240416-nkhlasah8s

  • MD5

    9fe25efd2c91d89e9988702b75f6b7a4

  • SHA1

    5a3d4fc02a6a8efea4f70219822d6d6dbbe96f62

  • SHA256

    5f5df9c28a22a548658780448bd6aa83cde28818f7873423dfa10036f8ab6e4f

  • SHA512

    dfe70e71031429f810515d036a1b11f3048bc62b5e38506c794a60281574859eac0f790237868f14fdd56ef6a93ab7c1d1998ce21594de0719f65b8182ef137c

  • SSDEEP

    6144:fXzKdNY49u8rVkvuyRAT/TRPkTMec601net:ga4AnmWQ/tPCNp01

Score
7/10
upx

Malware Config

Targets

    • Target

      5f5df9c28a22a548658780448bd6aa83cde28818f7873423dfa10036f8ab6e4f

    • Size

      266KB

    • MD5

      9fe25efd2c91d89e9988702b75f6b7a4

    • SHA1

      5a3d4fc02a6a8efea4f70219822d6d6dbbe96f62

    • SHA256

      5f5df9c28a22a548658780448bd6aa83cde28818f7873423dfa10036f8ab6e4f

    • SHA512

      dfe70e71031429f810515d036a1b11f3048bc62b5e38506c794a60281574859eac0f790237868f14fdd56ef6a93ab7c1d1998ce21594de0719f65b8182ef137c

    • SSDEEP

      6144:fXzKdNY49u8rVkvuyRAT/TRPkTMec601net:ga4AnmWQ/tPCNp01

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks