Overview

overview

7

Static

static

3

a9f57f2c7e...95.exe

windows7-x64

7

a9f57f2c7e...95.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a9f57f2c7ea633e9547ffc6f1711df33f0ba45f17416883cf3bbf93968a5f095

  • Size

    95KB

  • Sample

    240811-bf4xhssalh

  • MD5

    04630a18f91f077384bd0dfeefe940c2

  • SHA1

    9e3be68351c443c5cabfb1fdb1bc4b2db90f19b9

  • SHA256

    a9f57f2c7ea633e9547ffc6f1711df33f0ba45f17416883cf3bbf93968a5f095

  • SHA512

    81934063ac6bf524d193c5a4e08684e90862fc42394f518c02d98db24ed9e5a9f0f64b7c63d1e25828cc15f03c3d298152b1c8bae94b56f264a4419352ced585

  • SSDEEP

    1536:EGqRGbQHSgOTw1BFxnsUdsdBhMgxRFy2kckEUEVvccRPAAXLSYPph/ATvYSByU6R:lbjgjXxdWBhMwRFy2Rk/kcIAebPph/Am

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      a9f57f2c7ea633e9547ffc6f1711df33f0ba45f17416883cf3bbf93968a5f095

    • Size

      95KB

    • MD5

      04630a18f91f077384bd0dfeefe940c2

    • SHA1

      9e3be68351c443c5cabfb1fdb1bc4b2db90f19b9

    • SHA256

      a9f57f2c7ea633e9547ffc6f1711df33f0ba45f17416883cf3bbf93968a5f095

    • SHA512

      81934063ac6bf524d193c5a4e08684e90862fc42394f518c02d98db24ed9e5a9f0f64b7c63d1e25828cc15f03c3d298152b1c8bae94b56f264a4419352ced585

    • SSDEEP

      1536:EGqRGbQHSgOTw1BFxnsUdsdBhMgxRFy2kckEUEVvccRPAAXLSYPph/ATvYSByU6R:lbjgjXxdWBhMwRFy2Rk/kcIAebPph/Am

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks