Overview

overview

7

Static

static

3

d52af00b8d...00.exe

windows7-x64

7

d52af00b8d...00.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d52af00b8dcf2d1ac8a7a9f709186ca2b8e88959e74659d39a4b33eb12a92a00.exe

  • Size

    2.1MB

  • Sample

    240726-gyt3xsthmh

  • MD5

    92472dfff734674d16ca7878b9d38069

  • SHA1

    32739d52d2a18307e434f430d18b80ca5df47584

  • SHA256

    d52af00b8dcf2d1ac8a7a9f709186ca2b8e88959e74659d39a4b33eb12a92a00

  • SHA512

    c236b47f4e2a9a543e89edde386df6a91d07d6ddf43ef9b9737f4018b5cfb1cf0f04c2c2122f7dd7ce77afb2ed7f3a64002324ed2ce6bb0f99dcafa43b92cbab

  • SSDEEP

    24576:7mapOBKeLjnugJO7qQwJJB4fYsojgKd4MJfVmNtmvlJawWRVzasQckW5AhDV5cMN:7+JOcJJBYadRmDclJawWV2N5SM

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      d52af00b8dcf2d1ac8a7a9f709186ca2b8e88959e74659d39a4b33eb12a92a00.exe

    • Size

      2.1MB

    • MD5

      92472dfff734674d16ca7878b9d38069

    • SHA1

      32739d52d2a18307e434f430d18b80ca5df47584

    • SHA256

      d52af00b8dcf2d1ac8a7a9f709186ca2b8e88959e74659d39a4b33eb12a92a00

    • SHA512

      c236b47f4e2a9a543e89edde386df6a91d07d6ddf43ef9b9737f4018b5cfb1cf0f04c2c2122f7dd7ce77afb2ed7f3a64002324ed2ce6bb0f99dcafa43b92cbab

    • SSDEEP

      24576:7mapOBKeLjnugJO7qQwJJB4fYsojgKd4MJfVmNtmvlJawWRVzasQckW5AhDV5cMN:7+JOcJJBYadRmDclJawWV2N5SM

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks