Overview

overview

7

Static

static

7

6c9bd914e5...21.exe

windows7-x64

7

6c9bd914e5...21.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c9bd914e5070d3f708af031c0964d9c0a21c21b7885462ae9ad60e9d6996f21.exe

  • Size

    134KB

  • Sample

    240523-bsllpsgd7y

  • MD5

    01049e52577b707361c81a3465300b50

  • SHA1

    a90e31406437ff17fa9fa973518bc31a1016c154

  • SHA256

    6c9bd914e5070d3f708af031c0964d9c0a21c21b7885462ae9ad60e9d6996f21

  • SHA512

    e5f85a56352bb769ff86ab01e59b3aaae3e6502a2c9b0c26a3cf1a3d880d597eea05c2a9d78cb680782bd2da5a5826e70b28bd40a9ea558d0b38b96dd184be52

  • SSDEEP

    1536:YGYU/W2/HG6QMauSV3ixJHABLrmhH7i9eNOOg00GqMIK7aGZh3SO0:YfU/WF6QMauSuiWNi9eNOl0007NZIO0

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      6c9bd914e5070d3f708af031c0964d9c0a21c21b7885462ae9ad60e9d6996f21.exe

    • Size

      134KB

    • MD5

      01049e52577b707361c81a3465300b50

    • SHA1

      a90e31406437ff17fa9fa973518bc31a1016c154

    • SHA256

      6c9bd914e5070d3f708af031c0964d9c0a21c21b7885462ae9ad60e9d6996f21

    • SHA512

      e5f85a56352bb769ff86ab01e59b3aaae3e6502a2c9b0c26a3cf1a3d880d597eea05c2a9d78cb680782bd2da5a5826e70b28bd40a9ea558d0b38b96dd184be52

    • SSDEEP

      1536:YGYU/W2/HG6QMauSV3ixJHABLrmhH7i9eNOOg00GqMIK7aGZh3SO0:YfU/WF6QMauSuiWNi9eNOl0007NZIO0

    Score
    7/10
    persistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks