Overview

overview

10

Static

static

10

db37e288df...6a.exe

windows7-x64

9

db37e288df...6a.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    db37e288dfa91643fde742370334d749d6ae25567bc7953ed0afa5ec47d2206a

  • Size

    134KB

  • Sample

    240605-eqp3wsee94

  • MD5

    c496cf0c6a84170081bafba42d7fd4f1

  • SHA1

    4323659985f62d74ee6e0aff783b1ae7b125caed

  • SHA256

    db37e288dfa91643fde742370334d749d6ae25567bc7953ed0afa5ec47d2206a

  • SHA512

    d300732c3f8a5d58051bc27588049a3d70b3082dfdba09d4971fccbbdd0eddf57080fdeaab4ee79f67a745ed7baf9a5919c2abca5b806c849ffc2e3fd169b930

  • SSDEEP

    1536:YGYU/W2/HG6QMauSV3ixJHABLrmhH7i9eNOOg00GqMIK7aGZh3SO1:YfU/WF6QMauSuiWNi9eNOl0007NZIO1

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      db37e288dfa91643fde742370334d749d6ae25567bc7953ed0afa5ec47d2206a

    • Size

      134KB

    • MD5

      c496cf0c6a84170081bafba42d7fd4f1

    • SHA1

      4323659985f62d74ee6e0aff783b1ae7b125caed

    • SHA256

      db37e288dfa91643fde742370334d749d6ae25567bc7953ed0afa5ec47d2206a

    • SHA512

      d300732c3f8a5d58051bc27588049a3d70b3082dfdba09d4971fccbbdd0eddf57080fdeaab4ee79f67a745ed7baf9a5919c2abca5b806c849ffc2e3fd169b930

    • SSDEEP

      1536:YGYU/W2/HG6QMauSV3ixJHABLrmhH7i9eNOOg00GqMIK7aGZh3SO1:YfU/WF6QMauSuiWNi9eNOl0007NZIO1

    Score
    9/10
    persistenceupx

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks