9cadee5b34c966c026ab1d9884e268e84baa5ff4cc08be99b2b4b5136a83b639 | Triage

Submit
Reports

Overview

overview

Static

static

9cadee5b34...39.exe

windows7-x64

9

9cadee5b34...39.exe

windows10-2004-x64

9

Sharing

General

Target

9cadee5b34c966c026ab1d9884e268e84baa5ff4cc08be99b2b4b5136a83b639
Size

2.3MB
Sample

240603-bxna4aee2w
MD5

d980e3a1be88f079ef4031cbb6256f63
SHA1

ae36fa73ca63f375810c1bee693e4270cade6f8e
SHA256

9cadee5b34c966c026ab1d9884e268e84baa5ff4cc08be99b2b4b5136a83b639
SHA512

09f618864948a1a59609150b7bbfa875cd365125af5b417f75ac47ebb6c7f31fffe996879725241d7b0c092e447542d7e6b9b107af1049403593468b66eae421
SSDEEP

49152:flU2/ygVkB1CtDU4CXN2Va90JgUpyCq683fL+GpofuFVhrnmEH5:feoygVkB1m47X9ggm3If3ofwrrnmEH5

Score

10^/10

persistence upx

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

9cadee5b34c966c026ab1d9884e268e84baa5ff4cc08be99b2b4b5136a83b639.exe

Resource

win7-20240221-en

persistence upx

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

9cadee5b34c966c026ab1d9884e268e84baa5ff4cc08be99b2b4b5136a83b639.exe

Resource

win10v2004-20240508-en

persistence upx

windows10-2004-x64

13 signatures

150 seconds

Malware Config

Targets

- Target
  
  9cadee5b34c966c026ab1d9884e268e84baa5ff4cc08be99b2b4b5136a83b639
- Size
  
  2.3MB
- MD5
  
  d980e3a1be88f079ef4031cbb6256f63
- SHA1
  
  ae36fa73ca63f375810c1bee693e4270cade6f8e
- SHA256
  
  9cadee5b34c966c026ab1d9884e268e84baa5ff4cc08be99b2b4b5136a83b639
- SHA512
  
  09f618864948a1a59609150b7bbfa875cd365125af5b417f75ac47ebb6c7f31fffe996879725241d7b0c092e447542d7e6b9b107af1049403593468b66eae421
- SSDEEP
  
  49152:flU2/ygVkB1CtDU4CXN2Va90JgUpyCq683fL+GpofuFVhrnmEH5:feoygVkB1m47X9ggm3If3ofwrrnmEH5
Score

9^/10

persistence upx
- UPX dump on OEP (original entry point)
- Modifies AppInit DLL entries
  persistence
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy