General

  • Target

    c39d5f5fdd0d75d49b077258eebc8b513dddae950f895adbbe9d2238cab42502

  • Size

    13.0MB

  • Sample

    240704-vl6svasbrc

  • MD5

    0212037680d9fba1c4bba61203aa4637

  • SHA1

    5848e741266f24704650e3655269b0f6964f6bc9

  • SHA256

    c39d5f5fdd0d75d49b077258eebc8b513dddae950f895adbbe9d2238cab42502

  • SHA512

    bf0c7401a2e3e1a9ee667ba2b7d948d353f021c557ff8c1f66497d7c317b1428a1a2638d66a7a609be88995bc06c5979b0c5ab00441221110f0c1b30160feb5c

  • SSDEEP

    393216:Z/zeRbSKKhxx898C140sZFuZOf/XvZPq5/L:hQSdhrM8CO06FqoJI

Score
7/10
upx

Malware Config

Targets

    • Target

      Stardock Fences v4.19.0/StardockFences v4.19.0 x64/Crack/Patch.exe

    • Size

      388KB

    • MD5

      a83c862ce356ce27aa1bcad439de71ac

    • SHA1

      777680118a9128f5f59b3855ddeb6361b4171722

    • SHA256

      5405e5c8a154f6219c933dba05ef3ca2d1162e666cd36b183ba8580f209c898e

    • SHA512

      4e2e1039dab95ef3d27d6f1fa2e3674bd29f29c41d9bd0d9bea7cfc3dc1f7821ba013b76ca07b713852f923b4662df90a1da9180bbd14ee6442e66da6bb8e853

    • SSDEEP

      6144:zFbE8KURmKDa4PRwrPw/SMekXKKoGGJavRO+tGj9ZCkXleBnXr8x5JbY7ZZv:zFVKMmf4PRyP0XRoGIM2Hod8npYNp

    Score
    7/10
    • Loads dropped DLL

    • Target

      Stardock Fences v4.19.0/StardockFences v4.19.0 x64/StardockFences v4.19.0 x64.exe

    • Size

      13.1MB

    • MD5

      1859e9321fe3864a9c618e07f88083d8

    • SHA1

      0d4faad7c2fb84ffde884f02431d6d7ac599e0f6

    • SHA256

      924a04a650561cc238b242c04bb3ce941f444b156617a5d2b6c6022028cf9dd4

    • SHA512

      9bb0a5709454ea2f9d2e3a1ab7a3fde565b40bdebbc5085d624f557eb51615802aa7c4382b8d906767f0f03e1c3c4671b8015cf81faaf293bec40833f970e26c

    • SSDEEP

      393216:TAPSiFj6xF2V8x8BERsRGHD+rFvajKhX9:sPSC6xFuC8ORSGDyL

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks