Overview

overview

10

Static

static

10

5ed949b837...86.exe

windows7-x64

9

5ed949b837...86.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5ed949b837cccef16161f23abe33e13c3f31aa2e6c37a30b31d4f0a07590c686

  • Size

    59KB

  • Sample

    240522-17akesba63

  • MD5

    16bbfa2cec4cfecd921a474851c31dea

  • SHA1

    46047b242e5511cfe4afe5ada6b8b7d4857da842

  • SHA256

    5ed949b837cccef16161f23abe33e13c3f31aa2e6c37a30b31d4f0a07590c686

  • SHA512

    44d89b5386bb7d255a8bf7c2e6331dd1bb91d094aea1832e235e9c515ff5d0f58d160cd4720d4f5ed831128cad4435df6acfa3252249cda33c05a250ba276c04

  • SSDEEP

    768:qBwBUBvncnz3LjBuylJxYE8y9Z0nphG+YMlTv9RL5EAgg93vKGqy/u96TEKtb5Z5:HUBGjXk2fYfUOP5TlfCngk9yG4TD7MY

Score
10/10
upx

Malware Config

Targets

    • Target

      5ed949b837cccef16161f23abe33e13c3f31aa2e6c37a30b31d4f0a07590c686

    • Size

      59KB

    • MD5

      16bbfa2cec4cfecd921a474851c31dea

    • SHA1

      46047b242e5511cfe4afe5ada6b8b7d4857da842

    • SHA256

      5ed949b837cccef16161f23abe33e13c3f31aa2e6c37a30b31d4f0a07590c686

    • SHA512

      44d89b5386bb7d255a8bf7c2e6331dd1bb91d094aea1832e235e9c515ff5d0f58d160cd4720d4f5ed831128cad4435df6acfa3252249cda33c05a250ba276c04

    • SSDEEP

      768:qBwBUBvncnz3LjBuylJxYE8y9Z0nphG+YMlTv9RL5EAgg93vKGqy/u96TEKtb5Z5:HUBGjXk2fYfUOP5TlfCngk9yG4TD7MY

    Score
    9/10
    upx

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks