General

  • Target

    48073376b0a99b7c8f11427dbc92eec03f0ada9976b27e4a8c4f2b6634c2c9f9

  • Size

    423KB

  • Sample

    240610-1f2jtssarn

  • MD5

    ad7cf66560e0c2c57ae299f8c727bf66

  • SHA1

    e160143b3037d72a551cfb02a0b98ce32f92dae4

  • SHA256

    48073376b0a99b7c8f11427dbc92eec03f0ada9976b27e4a8c4f2b6634c2c9f9

  • SHA512

    ec3feb22cdd7bcada254123424e402e7ddc142b48b5b1b2ee11afdb6f7cc7276787542a6f4fa7e2cb53bef7c4d13ec6cb2b5aee476a4a954748ec5b49ce0fc71

  • SSDEEP

    6144:DP+PtrmEs7eVyYr9AmEcmI5qpYDb1MV+w1ILKcelS4:DP+Pt9sKVyY3EcmIopMbv1Ockd

Score
10/10
upx

Malware Config

Targets

    • Target

      48073376b0a99b7c8f11427dbc92eec03f0ada9976b27e4a8c4f2b6634c2c9f9

    • Size

      423KB

    • MD5

      ad7cf66560e0c2c57ae299f8c727bf66

    • SHA1

      e160143b3037d72a551cfb02a0b98ce32f92dae4

    • SHA256

      48073376b0a99b7c8f11427dbc92eec03f0ada9976b27e4a8c4f2b6634c2c9f9

    • SHA512

      ec3feb22cdd7bcada254123424e402e7ddc142b48b5b1b2ee11afdb6f7cc7276787542a6f4fa7e2cb53bef7c4d13ec6cb2b5aee476a4a954748ec5b49ce0fc71

    • SSDEEP

      6144:DP+PtrmEs7eVyYr9AmEcmI5qpYDb1MV+w1ILKcelS4:DP+Pt9sKVyY3EcmIopMbv1Ockd

    Score
    9/10
    • UPX dump on OEP (original entry point)

    • Drops file in Drivers directory

    • Manipulates Digital Signatures

      Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Blocklisted process makes network request

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks