Overview

overview

7

Static

static

7

06f996ced9...0N.exe

windows7-x64

7

06f996ced9...0N.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    06f996ced9764cb98f0fb8c82cbdafd0N.exe

  • Size

    1.5MB

  • Sample

    240909-sb7w2stgpl

  • MD5

    06f996ced9764cb98f0fb8c82cbdafd0

  • SHA1

    effce8a03b65f800622775e7202b1c5346757b0e

  • SHA256

    88a643afa09cbb028a71e040ec2ea452ab617b1a25daf779fbc586c5acbd2200

  • SHA512

    1b3d8e5def3e7ee6f445abefa857be5979208dc62c6dbdfdd21265d1850316a04c9dc29d6524aec0c43161b4d9aad8ff0ef9e41911c783cb3af8cf49ee4f06dd

  • SSDEEP

    24576:ZjpK47SCtmCwPiijSLcGXlayFsDHD07xp+EHX7j62FgbC0zUHaDbW:ZjQGm3iijGXUyyDjIH+E37j6y0wHaPW

Score
7/10
defense_evasiondiscoveryupx

Malware Config

Targets

    • Target

      06f996ced9764cb98f0fb8c82cbdafd0N.exe

    • Size

      1.5MB

    • MD5

      06f996ced9764cb98f0fb8c82cbdafd0

    • SHA1

      effce8a03b65f800622775e7202b1c5346757b0e

    • SHA256

      88a643afa09cbb028a71e040ec2ea452ab617b1a25daf779fbc586c5acbd2200

    • SHA512

      1b3d8e5def3e7ee6f445abefa857be5979208dc62c6dbdfdd21265d1850316a04c9dc29d6524aec0c43161b4d9aad8ff0ef9e41911c783cb3af8cf49ee4f06dd

    • SSDEEP

      24576:ZjpK47SCtmCwPiijSLcGXlayFsDHD07xp+EHX7j62FgbC0zUHaDbW:ZjQGm3iijGXUyyDjIH+E37j6y0wHaPW

    Score
    7/10
    defense_evasiondiscoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Hide Artifacts: Hidden Files and Directories

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks