General

  • Target

    949711b8e32f97493d6bee9c46b17290N.exe

  • Size

    43KB

  • Sample

    240816-tv5fpsvarc

  • MD5

    949711b8e32f97493d6bee9c46b17290

  • SHA1

    281af3d2efb8252d77a38127cbb7917892387b65

  • SHA256

    b32dad3768228701b6bd7d12937f60a369b855a449eab4d18b4a12b58f4d580f

  • SHA512

    2e6e09c1590666f33ec9f05dbd3ab0602d9b4c4fa6d5b9370219c3cfa3eb54e8b32d734b2b891f06e46c9c01163cd7bd2b9559ca9071c453a89c23888b3c6227

  • SSDEEP

    768:of1Y9RRw/dUT6vurTxzkUOyGAv+rIwd5MdQ95k5mw4:CY9jw/dUT62rTx4UOWWrXq8m2

Malware Config

Targets

    • Target

      949711b8e32f97493d6bee9c46b17290N.exe

    • Size

      43KB

    • MD5

      949711b8e32f97493d6bee9c46b17290

    • SHA1

      281af3d2efb8252d77a38127cbb7917892387b65

    • SHA256

      b32dad3768228701b6bd7d12937f60a369b855a449eab4d18b4a12b58f4d580f

    • SHA512

      2e6e09c1590666f33ec9f05dbd3ab0602d9b4c4fa6d5b9370219c3cfa3eb54e8b32d734b2b891f06e46c9c01163cd7bd2b9559ca9071c453a89c23888b3c6227

    • SSDEEP

      768:of1Y9RRw/dUT6vurTxzkUOyGAv+rIwd5MdQ95k5mw4:CY9jw/dUT62rTx4UOWWrXq8m2

    • Upatre

      Upatre is a generic malware downloader.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks