Overview

overview

7

Static

static

7

cde072bc38...0N.exe

windows7-x64

7

cde072bc38...0N.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    cde072bc388585bffec843021486f360N.exe

  • Size

    558KB

  • Sample

    240821-knglmayhnb

  • MD5

    cde072bc388585bffec843021486f360

  • SHA1

    657048d74e1460b1977ec1d90768ef26fd6456b8

  • SHA256

    a694421618ea485e198796361387f5a744ebdce9eb07216d1c38b081f05ef08e

  • SHA512

    07b983cae93d66b062404d30a1310727577dd3a240e393c08f4f821360bbcc955aaeddf1018ae1035b936661c8d9016b927bc82f4d85e8ca05ca34c301f85077

  • SSDEEP

    12288:21+vKnoA0cdoIl9jmDBJ4Uh2DEq/51r575O65n9VZ:e+vg0HU9EP4UheEq/B79R

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      cde072bc388585bffec843021486f360N.exe

    • Size

      558KB

    • MD5

      cde072bc388585bffec843021486f360

    • SHA1

      657048d74e1460b1977ec1d90768ef26fd6456b8

    • SHA256

      a694421618ea485e198796361387f5a744ebdce9eb07216d1c38b081f05ef08e

    • SHA512

      07b983cae93d66b062404d30a1310727577dd3a240e393c08f4f821360bbcc955aaeddf1018ae1035b936661c8d9016b927bc82f4d85e8ca05ca34c301f85077

    • SSDEEP

      12288:21+vKnoA0cdoIl9jmDBJ4Uh2DEq/51r575O65n9VZ:e+vg0HU9EP4UheEq/B79R

    Score
    7/10
    discoverypersistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks