Overview

overview

7

Static

static

7

2a143996c2...dd.exe

windows7-x64

7

2a143996c2...dd.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eab842afa1ba1d85c5e2a44a0415b5d1.zip

  • Size

    278KB

  • Sample

    240903-cd1yhsvgkb

  • MD5

    b00388e53d709ebaafa237e22e25432b

  • SHA1

    06289c9d72e85212623623acc37781808b18ca8b

  • SHA256

    9e79a5c0e40e811c2e6e1a74629f7c3bea05ea1266ea5750548a8dff92866630

  • SHA512

    3fdb7889aed74f6fe1c282bbccc7f572660c88a94bbcc846cad60c994749246f33d86a3db554e885585f3569c8afb87dccd05960a01f6c843241afdfbf9052dc

  • SSDEEP

    6144:k0x+FAAH2ONDyWHHujyTztUaLIFWIrgc4+oOOdFQRWf:knAAH2ONDTHJtlIMggcte+Wf

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      2a143996c28570fb29ed146e960ad6eeeefac815e9710263d449f54071cab5dd

    • Size

      285KB

    • MD5

      eab842afa1ba1d85c5e2a44a0415b5d1

    • SHA1

      d0253142e41c3909cf55a2d2c9930706c763c56e

    • SHA256

      2a143996c28570fb29ed146e960ad6eeeefac815e9710263d449f54071cab5dd

    • SHA512

      8d713d0a508cbe63f0970f688dac65e72e6e684bfff66960a984317cbbd63c7f0acba969b5c069ed15e99bcd63bb6789098f6094057c54ff6b3dfaf354955f55

    • SSDEEP

      6144:s1db49+rEg024fpLZazEjvE/rbay19tSt4bO2BaDmeBJe/ZVMXTw:sjkArEN249AyE/rbaMct4bO2/n

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks