Overview

overview

8

Static

static

7

47d523369d...78.exe

windows7-x64

8

47d523369d...78.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    47d523369db38a6a8507b1ddf7547a60e8e93e5f0e6f466076313dae85c6ef78

  • Size

    168KB

  • Sample

    240911-zxmasstbrf

  • MD5

    b7493d80bfe67658e3cdfb9be7acab36

  • SHA1

    43e047458249be053d21eee5468d7e7e93321c41

  • SHA256

    47d523369db38a6a8507b1ddf7547a60e8e93e5f0e6f466076313dae85c6ef78

  • SHA512

    1ab5c88ecf6068fe2ff7173ce4ef3dde2591eb6b071602a107ef6ae2eb513adf39075ff94d80412e1b6d9a2fda91b1bf5022fed4195a61a4685131eef37ff51e

  • SSDEEP

    1536:i2WDcOpULCH0a+TNXyyXetH28JZveKivnmOOO/:zWDuLzZXyyXeECveDnmOOO/

Score
8/10
defense_evasiondiscoveryevasionupx

Malware Config

Targets

    • Target

      47d523369db38a6a8507b1ddf7547a60e8e93e5f0e6f466076313dae85c6ef78

    • Size

      168KB

    • MD5

      b7493d80bfe67658e3cdfb9be7acab36

    • SHA1

      43e047458249be053d21eee5468d7e7e93321c41

    • SHA256

      47d523369db38a6a8507b1ddf7547a60e8e93e5f0e6f466076313dae85c6ef78

    • SHA512

      1ab5c88ecf6068fe2ff7173ce4ef3dde2591eb6b071602a107ef6ae2eb513adf39075ff94d80412e1b6d9a2fda91b1bf5022fed4195a61a4685131eef37ff51e

    • SSDEEP

      1536:i2WDcOpULCH0a+TNXyyXetH28JZveKivnmOOO/:zWDuLzZXyyXeECveDnmOOO/

    Score
    8/10
    defense_evasiondiscoveryevasionupx

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks