General

  • Target

    dee0fe99bf53a404bf162cfd239d22425390ea6eeee16faf2bf3457e467743d0

  • Size

    24KB

  • Sample

    240710-gmdlsszgkr

  • MD5

    5514470f8edb4733f119fbb6d441e002

  • SHA1

    406eb68234149df1aac1c9d611f3bf14231f0e5f

  • SHA256

    dee0fe99bf53a404bf162cfd239d22425390ea6eeee16faf2bf3457e467743d0

  • SHA512

    84df5103f760a317d8c5de0527e65cab673fcae9ec1f03977ab1f772895fb761c54e9b04c07d82c3a9011fc3867ba975a1bf7f3cef17c72ae9eab615e4e6cb65

  • SSDEEP

    384:CxL+q5r+PpHfXhUkKvI4QwjQ/vFJhheJ06oZrj/vBKDJZ4:ua4r+PpHfXGLOnNh8noR+K

Score
8/10
upx

Malware Config

Targets

    • Target

      dee0fe99bf53a404bf162cfd239d22425390ea6eeee16faf2bf3457e467743d0

    • Size

      24KB

    • MD5

      5514470f8edb4733f119fbb6d441e002

    • SHA1

      406eb68234149df1aac1c9d611f3bf14231f0e5f

    • SHA256

      dee0fe99bf53a404bf162cfd239d22425390ea6eeee16faf2bf3457e467743d0

    • SHA512

      84df5103f760a317d8c5de0527e65cab673fcae9ec1f03977ab1f772895fb761c54e9b04c07d82c3a9011fc3867ba975a1bf7f3cef17c72ae9eab615e4e6cb65

    • SSDEEP

      384:CxL+q5r+PpHfXhUkKvI4QwjQ/vFJhheJ06oZrj/vBKDJZ4:ua4r+PpHfXGLOnNh8noR+K

    Score
    8/10
    • Drops file in Drivers directory

    • Manipulates Digital Signatures

      Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops desktop.ini file(s)

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks