Overview

overview

7

Static

static

7

U盘详情检查.exe

windows7-x64

7

U盘详情检查.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8c545d0f75765af6e91f51dde82aeb0f0c94868de17f317d99670f02fa3b3d95

  • Size

    316KB

  • Sample

    240812-j2pcyssdrn

  • MD5

    02edcc7ca5fa6f2de34eeccd512fa282

  • SHA1

    b5f5efc49edfae8260facdc395c0ceebdb7e21c8

  • SHA256

    8c545d0f75765af6e91f51dde82aeb0f0c94868de17f317d99670f02fa3b3d95

  • SHA512

    775421b385ef3c6429722af7a5e498a7a66cb96073894c636137cc6e122d0c4a88a0a2faaa0cf1d13b4acb86b16cea39083ccabb54b7b1b20bc6c908f63c27c3

  • SSDEEP

    6144:gBrIO5XNujoXZ+QP0yjSSkGJe3idxhsA9XhH79jr2SlFp57XLx7FO2tVHMZU:aIO4oADLaDr9XvHLvQ4qU

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      U盘详情检查.exe

    • Size

      322KB

    • MD5

      da52ce82c0ba2351d8b814731d525578

    • SHA1

      e17e5ede5aae894754c37d0ccaa6ead6761ffabf

    • SHA256

      28c6539883030f2be813676c5afebb52cbbf60cdbb403a7ab0cd62fb3bf8741d

    • SHA512

      52d8a7bf311b3d47c43b3caf274411019c0d3e48f9c03af01152ee56f0666693e68c5285827d4bc70468af591f92cd87d2d29b53bfd35c259ace6d51de0eb6ff

    • SSDEEP

      6144:cyvmHjHnJuvoXZ+AP0yRSmQGDa3ed9hsA5XhXr9jBCSpFp5tXLL7FO2xVO:cNjHncoATPwZr5X7VTv0G8

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks