Overview

overview

7

Static

static

7

postal2demo.exe

windows7-x64

7

postal2demo.exe

windows10-2004-x64

7

out.exe

windows7-x64

out.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    postal2demo.exe

  • Size

    123.0MB

  • Sample

    240809-kxb3haydmq

  • MD5

    4b7d0b53f01fee9426ae6b21a001d2bc

  • SHA1

    d7f979cfff8b8bc1004451adc867a0d5c3ed658e

  • SHA256

    8a0ee6ee39214556c527720dd6a4a89564050ff5aa9d42e3e9db794cdc9423d7

  • SHA512

    e7a192bdfc83e5ddcdfd0f1b72b417d6a55f5b509e82f31da0170fe25145d8a0201765b1b337848d3bb1defc150c60417b015ea35339d3753ef4c9d30bb45658

  • SSDEEP

    3145728:0oseb/k0l3u0Wb2MZ4nQQiXGD8ZRjLk1cYZOHV5hurI1fg1d:0a/kkux2i4nQpWD8ZR3k/UHDgk1fQd

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      postal2demo.exe

    • Size

      123.0MB

    • MD5

      4b7d0b53f01fee9426ae6b21a001d2bc

    • SHA1

      d7f979cfff8b8bc1004451adc867a0d5c3ed658e

    • SHA256

      8a0ee6ee39214556c527720dd6a4a89564050ff5aa9d42e3e9db794cdc9423d7

    • SHA512

      e7a192bdfc83e5ddcdfd0f1b72b417d6a55f5b509e82f31da0170fe25145d8a0201765b1b337848d3bb1defc150c60417b015ea35339d3753ef4c9d30bb45658

    • SSDEEP

      3145728:0oseb/k0l3u0Wb2MZ4nQQiXGD8ZRjLk1cYZOHV5hurI1fg1d:0a/kkux2i4nQpWD8ZR3k/UHDgk1fQd

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

    • Target

      out.upx

    • Size

      90KB

    • MD5

      3420134119193805e9a5678ab0b10310

    • SHA1

      37c316fb5c8d7ecbfa884a9f54f0ae8b2379404e

    • SHA256

      c78f46faacf27b2cfaed038dcb7d022acbcbac818cb2786574fe5f7ec9de70b2

    • SHA512

      a5f326a113d2e160a1bab67a257183826f6210f599127a8e3c38fce7277996867598b78a4651fc1348e8e998afce45f848ded1250930c7b4c65eb10aa205e2bd

    • SSDEEP

      1536:bOjlPbtjRV8FQ87b1LBZnCiAPMM4UMCkhcQHtA3:iVbtjRVaR7b1LBcvPn4Um2QHt

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks