Overview

overview

8

Static

static

7

7d1a932ba3...0N.exe

windows7-x64

8

7d1a932ba3...0N.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7d1a932ba377f28682ba115c4766ffd0N.exe

  • Size

    36KB

  • Sample

    240727-b9hldazakk

  • MD5

    7d1a932ba377f28682ba115c4766ffd0

  • SHA1

    ce04fc9c6e5f79b0d193fddd1d11d3960e102b6e

  • SHA256

    eea979ea6df642888e19e6291c90ddaacf6bf983e2602b853eed22a789e7069b

  • SHA512

    1979eca5210ba4540eed46952d7b2bada24cee236ff4ccaa47d246e21ceecc45a878d51e5f57d7f4cc301b6fe774a1464ffc8389662aaf6398701665d75070b2

  • SSDEEP

    768:M3EVdV0YXY/nckNsWheCNSdd57Do5utsp1TOIIIwjkkvvvP:lVdm5/nprh3Ny57guSTOjvvvvP

Score
8/10
defense_evasiondiscoveryevasionupx

Malware Config

Targets

    • Target

      7d1a932ba377f28682ba115c4766ffd0N.exe

    • Size

      36KB

    • MD5

      7d1a932ba377f28682ba115c4766ffd0

    • SHA1

      ce04fc9c6e5f79b0d193fddd1d11d3960e102b6e

    • SHA256

      eea979ea6df642888e19e6291c90ddaacf6bf983e2602b853eed22a789e7069b

    • SHA512

      1979eca5210ba4540eed46952d7b2bada24cee236ff4ccaa47d246e21ceecc45a878d51e5f57d7f4cc301b6fe774a1464ffc8389662aaf6398701665d75070b2

    • SSDEEP

      768:M3EVdV0YXY/nckNsWheCNSdd57Do5utsp1TOIIIwjkkvvvP:lVdm5/nprh3Ny57guSTOjvvvvP

    Score
    8/10
    defense_evasiondiscoveryevasionupx

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks