General

  • Target

    ab8573e0e583f3f7e60c746217c2c2290151639e5639e99971ac95a2465d529e

  • Size

    600KB

  • Sample

    240630-a77xtavajm

  • MD5

    a9f2e8237eca2a0b02b1c4c217a06af8

  • SHA1

    f33bb0b58b48536cc5fcb013cebdb920909d22b6

  • SHA256

    ab8573e0e583f3f7e60c746217c2c2290151639e5639e99971ac95a2465d529e

  • SHA512

    d6ea1017d52bd4002c279972e8ed444a70da3ea4909bff555a72a98163fe08d4758dd0a490e8cebe2fd8a5fd8f72511fd7e580f0ce30c34ba5f67473d6c0e347

  • SSDEEP

    3072:lCaoAs101Pol0xPTM7mRCAdJSSxPUkl3Vn2ZMQTCk/dN92sdNhavtrVdewnAx3w7:lqDAwl0xPTMiR9JSSxPUKl0dodH6/S

Score
10/10
upx

Malware Config

Targets

    • Target

      ab8573e0e583f3f7e60c746217c2c2290151639e5639e99971ac95a2465d529e

    • Size

      600KB

    • MD5

      a9f2e8237eca2a0b02b1c4c217a06af8

    • SHA1

      f33bb0b58b48536cc5fcb013cebdb920909d22b6

    • SHA256

      ab8573e0e583f3f7e60c746217c2c2290151639e5639e99971ac95a2465d529e

    • SHA512

      d6ea1017d52bd4002c279972e8ed444a70da3ea4909bff555a72a98163fe08d4758dd0a490e8cebe2fd8a5fd8f72511fd7e580f0ce30c34ba5f67473d6c0e347

    • SSDEEP

      3072:lCaoAs101Pol0xPTM7mRCAdJSSxPUkl3Vn2ZMQTCk/dN92sdNhavtrVdewnAx3w7:lqDAwl0xPTMiR9JSSxPUKl0dodH6/S

    Score
    9/10
    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks