upatre

Resubmissions

23/09/2024, 08:10

240923-j2xpbszeqn10

24/07/2024, 04:06

240724-epgp5axdml10

Sharing

Copy URL Twitter E-mail

General

Target
476dc6541b905124ce8805d5bc7a7b70N.exe
Size 39KB
Sample240724-epgp5axdml
SHA256 400f49be330b4d306dae126ba7e2e38fcc16db06ab993954f534671c1e3cdf4d
MD5 476dc6541b905124ce8805d5bc7a7b70
SHA1 1d03a35c1800c758472bd62181bc4ee338fa7ede
SHA512 8c704628f506dd98f6c2eb3dc201269c3e8d322a25ceb1b461b58f313747c73c8bff6fa304e562b4b2809cb8eecdb9b3dfd395afd95847e1c9cb74d1e91c6570
SSDEEP 768:xb6ia+xAURMDKRji3x/o7vMjR1RFzVETB:ZraCWDKU8+u
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  476dc6541b905124ce8805d5bc7a7b70N.exe
- Size 39KB
- SHA256 400f49be330b4d306dae126ba7e2e38fcc16db06ab993954f534671c1e3cdf4d
- MD5 476dc6541b905124ce8805d5bc7a7b70
- SHA1 1d03a35c1800c758472bd62181bc4ee338fa7ede
- SHA512 8c704628f506dd98f6c2eb3dc201269c3e8d322a25ceb1b461b58f313747c73c8bff6fa304e562b4b2809cb8eecdb9b3dfd395afd95847e1c9cb74d1e91c6570
- SSDEEP 768:xb6ia+xAURMDKRji3x/o7vMjR1RFzVETB:ZraCWDKU8+u
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

upatre discovery downloader
- Upatre
  Upatre is a generic malware downloader.
  downloader upatre
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2