Overview

overview

7

Static

static

3

01880df740...a9.exe

windows7-x64

7

01880df740...a9.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    01880df7409a02cdd00a9d34992b93ccbed0db46ab4f9dddc1199e11c1f61fa9

  • Size

    96KB

  • Sample

    240909-wp3e9ssakp

  • MD5

    055a7ec43353689f06dd3498947e1052

  • SHA1

    e83a709c3fc729a8480ad40953c88db4ef51a2da

  • SHA256

    01880df7409a02cdd00a9d34992b93ccbed0db46ab4f9dddc1199e11c1f61fa9

  • SHA512

    485bdffb0c500cfa5c6d4e3570c97032160b1e6944ff43e18113994d272d4a0235e5b6763fd6df3afb78ad7a7df7d90d9288ec7d07b5d1a80382a4223f8dab37

  • SSDEEP

    3072:lbjgjXxdWBhMwRFy2Rk/kcIAebPph/ATvYKyUDI7Lurc:lfAXxd0qf2L/ATvryOI7ac

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      01880df7409a02cdd00a9d34992b93ccbed0db46ab4f9dddc1199e11c1f61fa9

    • Size

      96KB

    • MD5

      055a7ec43353689f06dd3498947e1052

    • SHA1

      e83a709c3fc729a8480ad40953c88db4ef51a2da

    • SHA256

      01880df7409a02cdd00a9d34992b93ccbed0db46ab4f9dddc1199e11c1f61fa9

    • SHA512

      485bdffb0c500cfa5c6d4e3570c97032160b1e6944ff43e18113994d272d4a0235e5b6763fd6df3afb78ad7a7df7d90d9288ec7d07b5d1a80382a4223f8dab37

    • SSDEEP

      3072:lbjgjXxdWBhMwRFy2Rk/kcIAebPph/ATvYKyUDI7Lurc:lfAXxd0qf2L/ATvryOI7ac

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks