General
-
Target
upscayl-2.11.0-win.exe
-
Size
215.9MB
-
Sample
240513-wn7nlaha57
-
MD5
cc1999bbed7ff527716810fee45fc2da
-
SHA1
7d9b4b56b812926f7d6e6f5e17d8f64656f6c8cc
-
SHA256
8b715b2bbd7d3edd8e8dbcd3a662ea5ed7427fbab23a5e86605068c88e836258
-
SHA512
96efc404e845ff6084dda2f06970a4230cf3b49abd63a755cc31c35552b884f102ca47e08fbeeca5954edc0dca61e9d71cf46427378730c3e681d99e97216d64
-
SSDEEP
6291456:B4N+NDYj0ZpQTyN8O+dTUOB6BF31qCQ3puw3isQThWtgj7:B4oNky62eTUfqCDKi1hWtgj7
Static task
static1
Behavioral task
behavioral1
Sample
upscayl-2.11.0-win.exe
Resource
win10v2004-20240508-es
Malware Config
Targets
-
-
Target
upscayl-2.11.0-win.exe
-
Size
215.9MB
-
MD5
cc1999bbed7ff527716810fee45fc2da
-
SHA1
7d9b4b56b812926f7d6e6f5e17d8f64656f6c8cc
-
SHA256
8b715b2bbd7d3edd8e8dbcd3a662ea5ed7427fbab23a5e86605068c88e836258
-
SHA512
96efc404e845ff6084dda2f06970a4230cf3b49abd63a755cc31c35552b884f102ca47e08fbeeca5954edc0dca61e9d71cf46427378730c3e681d99e97216d64
-
SSDEEP
6291456:B4N+NDYj0ZpQTyN8O+dTUOB6BF31qCQ3puw3isQThWtgj7:B4oNky62eTUfqCDKi1hWtgj7
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Legitimate hosting services abused for malware hosting/C2
-
Drops file in System32 directory
-