Overview

overview

7

Static

static

7

07e2135533...0N.exe

windows7-x64

7

07e2135533...0N.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    07e21355330ecc63bfe8f87ae88b51b0N.exe

  • Size

    135KB

  • Sample

    240818-z4pz9svcpg

  • MD5

    07e21355330ecc63bfe8f87ae88b51b0

  • SHA1

    12f44b76f7c372b0d407be90ccbedd0d63d55781

  • SHA256

    36d0b728cb3e68f5be318213959b63c6b2c971be49ff1309f440f5b4bd467614

  • SHA512

    46bd3c2c820b1817bac40bda4b72eba5d80673b8a3d703270ff569d231375022f07476ef0841fb35fffeb39659828947b06aa0e5c406dd4a1e3267c795afd4c8

  • SSDEEP

    1536:cGYU/W2/HG6QMauSV3ixJHABLrmhH7i99ROOg00GqMIK7aGZh3EI/:cfU/WF6QMauSuiWNi97Ol0007NZ6I/

Score
7/10
defense_evasiondiscoverypersistenceupx

Malware Config

Targets

    • Target

      07e21355330ecc63bfe8f87ae88b51b0N.exe

    • Size

      135KB

    • MD5

      07e21355330ecc63bfe8f87ae88b51b0

    • SHA1

      12f44b76f7c372b0d407be90ccbedd0d63d55781

    • SHA256

      36d0b728cb3e68f5be318213959b63c6b2c971be49ff1309f440f5b4bd467614

    • SHA512

      46bd3c2c820b1817bac40bda4b72eba5d80673b8a3d703270ff569d231375022f07476ef0841fb35fffeb39659828947b06aa0e5c406dd4a1e3267c795afd4c8

    • SSDEEP

      1536:cGYU/W2/HG6QMauSV3ixJHABLrmhH7i99ROOg00GqMIK7aGZh3EI/:cfU/WF6QMauSuiWNi97Ol0007NZ6I/

    Score
    7/10
    defense_evasiondiscoverypersistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks