Overview

overview

7

Static

static

7

70a3769323...0N.exe

windows7-x64

7

70a3769323...0N.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    70a376932367db442c8e45a593b49540N.exe

  • Size

    112KB

  • Sample

    240817-q737masaml

  • MD5

    70a376932367db442c8e45a593b49540

  • SHA1

    459cecfdc172d18fad15744356e7fd5336c01d0a

  • SHA256

    de759b507914d4351d1a4f3163f16c9957aa0148b1544e25c608e3184271df61

  • SHA512

    73cdb43354c0240eeb288717984522cfe734b78fc5c41f0b867a0d296d173d91c16ba76433629efb4faa05a9eaf1b04dfcc617bd7803f51a0be51cb42afb1ca6

  • SSDEEP

    768:zKEBUUC151Npquv3Rn4KE7pRnbcuyD7UYE:GoU5bLpXRxMnouy8D

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      70a376932367db442c8e45a593b49540N.exe

    • Size

      112KB

    • MD5

      70a376932367db442c8e45a593b49540

    • SHA1

      459cecfdc172d18fad15744356e7fd5336c01d0a

    • SHA256

      de759b507914d4351d1a4f3163f16c9957aa0148b1544e25c608e3184271df61

    • SHA512

      73cdb43354c0240eeb288717984522cfe734b78fc5c41f0b867a0d296d173d91c16ba76433629efb4faa05a9eaf1b04dfcc617bd7803f51a0be51cb42afb1ca6

    • SSDEEP

      768:zKEBUUC151Npquv3Rn4KE7pRnbcuyD7UYE:GoU5bLpXRxMnouy8D

    Score
    7/10
    discoverypersistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks