Overview

overview

7

Static

static

7

da0b40601a...0N.exe

windows7-x64

7

da0b40601a...0N.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    da0b40601a3a98f251b12bf830993d70N.exe

  • Size

    558KB

  • Sample

    240715-pqktaatfma

  • MD5

    da0b40601a3a98f251b12bf830993d70

  • SHA1

    6916fba0a692fc01b829be8e50461be47847e964

  • SHA256

    068f8c3ba7184982e734bb4a307565ae14e201c0f13ceecb1aed38c3870f3525

  • SHA512

    7d931e55906d05b5ab334cf2814bff9e4c93d66aac98f477d62b737116d30162b35084303107f4fb97e68015526e3e162ffbd0d0ef0f4f1022babb7b3b51209e

  • SSDEEP

    12288:21+vKnoA0cdoIl9jmDBJ4Uh2DEq/51r575O65n9Vp:e+vg0HU9EP4UheEq/B79B

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      da0b40601a3a98f251b12bf830993d70N.exe

    • Size

      558KB

    • MD5

      da0b40601a3a98f251b12bf830993d70

    • SHA1

      6916fba0a692fc01b829be8e50461be47847e964

    • SHA256

      068f8c3ba7184982e734bb4a307565ae14e201c0f13ceecb1aed38c3870f3525

    • SHA512

      7d931e55906d05b5ab334cf2814bff9e4c93d66aac98f477d62b737116d30162b35084303107f4fb97e68015526e3e162ffbd0d0ef0f4f1022babb7b3b51209e

    • SSDEEP

      12288:21+vKnoA0cdoIl9jmDBJ4Uh2DEq/51r575O65n9Vp:e+vg0HU9EP4UheEq/B79B

    Score
    7/10
    persistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks