Overview

overview

8

Static

static

7

53fd48d989...0N.exe

windows7-x64

8

53fd48d989...0N.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    53fd48d989c02c4cfd7d7cdbc9540940N

  • Size

    15KB

  • Sample

    240911-hm57gsycla

  • MD5

    53fd48d989c02c4cfd7d7cdbc9540940

  • SHA1

    ba8ebe275b24c823366ba4f06ccf2a0b6d126f72

  • SHA256

    2ee071579da35565f77a2dc017d1d86f82a08bb1922e3f2e0e9507e292b39e15

  • SHA512

    8d61cb60c33df2eba0a92f7d9282e129e8989a2e619e6d247c0befd44d9c91d417a4111715d1d6a1551c6899efff3e043686c7ae35f74fb4a6c2b06342d9dead

  • SSDEEP

    384:IO3qdXlIQV0YXd45xuYiMcRWnPbeVGWLwbbbVHHHH4fff+:IO3EVdV0YXd4DuicNV3Ffff+

Score
8/10
defense_evasiondiscoveryevasionupx

Malware Config

Targets

    • Target

      53fd48d989c02c4cfd7d7cdbc9540940N

    • Size

      15KB

    • MD5

      53fd48d989c02c4cfd7d7cdbc9540940

    • SHA1

      ba8ebe275b24c823366ba4f06ccf2a0b6d126f72

    • SHA256

      2ee071579da35565f77a2dc017d1d86f82a08bb1922e3f2e0e9507e292b39e15

    • SHA512

      8d61cb60c33df2eba0a92f7d9282e129e8989a2e619e6d247c0befd44d9c91d417a4111715d1d6a1551c6899efff3e043686c7ae35f74fb4a6c2b06342d9dead

    • SSDEEP

      384:IO3qdXlIQV0YXd45xuYiMcRWnPbeVGWLwbbbVHHHH4fff+:IO3EVdV0YXd4DuicNV3Ffff+

    Score
    8/10
    defense_evasiondiscoveryevasionupx

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks