Overview

overview

7

Static

static

7

2ef7bb88fe...0N.exe

windows7-x64

7

2ef7bb88fe...0N.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2ef7bb88fe2ceaee8081597e308b3460N.exe

  • Size

    609KB

  • Sample

    240819-kee2faxbrq

  • MD5

    2ef7bb88fe2ceaee8081597e308b3460

  • SHA1

    20ff5ecc19f5480289ac2b79327932ec30b19b00

  • SHA256

    906aab6503ebeeacf399dbbbc94c6addd99085ee218bcd1c1ea72833fe3099a7

  • SHA512

    ad5d19e8201108b27734b70a2007d4a6eb9e9f0487f5dc4e0a8f2958ecb6ea3cb79cd9cefc625acc0a4d1fe339ad97af47ba3e6017b12c6a3dcd305521d125ea

  • SSDEEP

    3072:0CaoAs101Pol0xPTM7mRCAdJSSxPUkl3VEMQTCk/dN92sdNhavtrVdewnAx3wmVk:0qDAwl0xPTMiR9JSSxPUKgdodH6gD

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      2ef7bb88fe2ceaee8081597e308b3460N.exe

    • Size

      609KB

    • MD5

      2ef7bb88fe2ceaee8081597e308b3460

    • SHA1

      20ff5ecc19f5480289ac2b79327932ec30b19b00

    • SHA256

      906aab6503ebeeacf399dbbbc94c6addd99085ee218bcd1c1ea72833fe3099a7

    • SHA512

      ad5d19e8201108b27734b70a2007d4a6eb9e9f0487f5dc4e0a8f2958ecb6ea3cb79cd9cefc625acc0a4d1fe339ad97af47ba3e6017b12c6a3dcd305521d125ea

    • SSDEEP

      3072:0CaoAs101Pol0xPTM7mRCAdJSSxPUkl3VEMQTCk/dN92sdNhavtrVdewnAx3wmVk:0qDAwl0xPTMiR9JSSxPUKgdodH6gD

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks