General

  • Target

    90a1852906977504a45e4a90f7c0c990N.exe

  • Size

    32KB

  • Sample

    240727-e3mhjaxdpp

  • MD5

    90a1852906977504a45e4a90f7c0c990

  • SHA1

    6a932e6cae279e5b09b82b0603cb3ad5253f4c3c

  • SHA256

    b4dd067baab3c4883813ea196c7064120a8660172c9f585ac1c1b46cbe46397b

  • SHA512

    6844f89ffbe8c60e9af60424da7a4eebc462f3f9acd71d22980e8e2375d6dd4fa3c6c125cbff60ff0ad9c4059165cc38cc1fa6a5376912562470a50f3d390060

  • SSDEEP

    384:3p7WmcCWRLzENdloN1T8F0pEEuukSX3uo9vKZR38aLGZL+iELavQ2J+l4/1S:35oz2srIFLu3VvKP3K/5QO+uc

Score
7/10

Malware Config

Targets

    • Target

      90a1852906977504a45e4a90f7c0c990N.exe

    • Size

      32KB

    • MD5

      90a1852906977504a45e4a90f7c0c990

    • SHA1

      6a932e6cae279e5b09b82b0603cb3ad5253f4c3c

    • SHA256

      b4dd067baab3c4883813ea196c7064120a8660172c9f585ac1c1b46cbe46397b

    • SHA512

      6844f89ffbe8c60e9af60424da7a4eebc462f3f9acd71d22980e8e2375d6dd4fa3c6c125cbff60ff0ad9c4059165cc38cc1fa6a5376912562470a50f3d390060

    • SSDEEP

      384:3p7WmcCWRLzENdloN1T8F0pEEuukSX3uo9vKZR38aLGZL+iELavQ2J+l4/1S:35oz2srIFLu3VvKP3K/5QO+uc

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Tasks