Overview

overview

7

Static

static

7

982a0410fa...0N.exe

windows7-x64

7

982a0410fa...0N.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    982a0410fa8fbebbac455d7268098000N.exe

  • Size

    134KB

  • Sample

    240723-la19jsyhjp

  • MD5

    982a0410fa8fbebbac455d7268098000

  • SHA1

    62bd54d60f61a3b3e03d416e23bdd01980445bcb

  • SHA256

    f8e31e7a15685a6f4fc5a6a13f04200066e5d43e748cb447a52609e93b156d21

  • SHA512

    2c3a264b21222d097ad216545938dd0e434524c296cbc08d92a163963c0cb5aec2d6159aa877157648f623c379a2a9103780962dbb7b308102676f5e15e66878

  • SSDEEP

    3072:Dxaw7lEvFCsE8uKqMJBrHnsAWNqubkdBytQlaVrAUdB1/:TlFstuKqMJ9Hn5WNqub/tpV841

Score
7/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target

      982a0410fa8fbebbac455d7268098000N.exe

    • Size

      134KB

    • MD5

      982a0410fa8fbebbac455d7268098000

    • SHA1

      62bd54d60f61a3b3e03d416e23bdd01980445bcb

    • SHA256

      f8e31e7a15685a6f4fc5a6a13f04200066e5d43e748cb447a52609e93b156d21

    • SHA512

      2c3a264b21222d097ad216545938dd0e434524c296cbc08d92a163963c0cb5aec2d6159aa877157648f623c379a2a9103780962dbb7b308102676f5e15e66878

    • SSDEEP

      3072:Dxaw7lEvFCsE8uKqMJBrHnsAWNqubkdBytQlaVrAUdB1/:TlFstuKqMJ9Hn5WNqub/tpV841

    Score
    7/10
    evasionpersistencetrojanupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks