Overview

overview

7

Static

static

7

58a26475d7...0N.exe

windows7-x64

7

58a26475d7...0N.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    58a26475d72161da32fde5c256c78b90N

  • Size

    59KB

  • Sample

    240911-yr75ms1ajb

  • MD5

    58a26475d72161da32fde5c256c78b90

  • SHA1

    91dfd70fb802f8c46015ae56fe54b47e5eaf1c04

  • SHA256

    27a17a7052a3ac83b00a8448887fd5909d955b2d9d41c2f6179b66961edcc2ca

  • SHA512

    5453f879008758d826a5c2d668435af697225102e33a03376001f58850a297a1c3fc33042561e1b34621f9e2c96fca77708ef7d23462d08cda25e2ebff18d4ad

  • SSDEEP

    1536:3+ZgwRdiE8cO4p1xRjfTvSq5r3ZiIZ4nouy8uh1aQU:OeodiUO4p13b9HiIeoutuh1aQU

Score
7/10
defense_evasiondiscoverypersistenceupx

Malware Config

Targets

    • Target

      58a26475d72161da32fde5c256c78b90N

    • Size

      59KB

    • MD5

      58a26475d72161da32fde5c256c78b90

    • SHA1

      91dfd70fb802f8c46015ae56fe54b47e5eaf1c04

    • SHA256

      27a17a7052a3ac83b00a8448887fd5909d955b2d9d41c2f6179b66961edcc2ca

    • SHA512

      5453f879008758d826a5c2d668435af697225102e33a03376001f58850a297a1c3fc33042561e1b34621f9e2c96fca77708ef7d23462d08cda25e2ebff18d4ad

    • SSDEEP

      1536:3+ZgwRdiE8cO4p1xRjfTvSq5r3ZiIZ4nouy8uh1aQU:OeodiUO4p13b9HiIeoutuh1aQU

    Score
    7/10
    defense_evasiondiscoverypersistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks