General

  • Target

    2cb30a84e02609bef086e0b0584ca2f0N

  • Size

    45KB

  • Sample

    240913-2l99lashmq

  • MD5

    2cb30a84e02609bef086e0b0584ca2f0

  • SHA1

    1cd052b669a75e804377667c1160db0d42da653a

  • SHA256

    488bbb82973cb04e72c4f1ca4f8061f6578098828e2ca16b83ea4a520f04cbff

  • SHA512

    b562ba2d383aa33aac1a99988c98be83d9f892549b1657126511c1e91419c500644de2e1b5357c7933d3dc2a96dffccd8ec304c87d7c823a10e0ddbf97692f71

  • SSDEEP

    768:4f1Y9RRw/dUT6vurAAVkUOyGAv+rBzDdeMdBTOJPp:SY9jw/dUT62rAA2UOWWrfflOr

Malware Config

Targets

    • Target

      2cb30a84e02609bef086e0b0584ca2f0N

    • Size

      45KB

    • MD5

      2cb30a84e02609bef086e0b0584ca2f0

    • SHA1

      1cd052b669a75e804377667c1160db0d42da653a

    • SHA256

      488bbb82973cb04e72c4f1ca4f8061f6578098828e2ca16b83ea4a520f04cbff

    • SHA512

      b562ba2d383aa33aac1a99988c98be83d9f892549b1657126511c1e91419c500644de2e1b5357c7933d3dc2a96dffccd8ec304c87d7c823a10e0ddbf97692f71

    • SSDEEP

      768:4f1Y9RRw/dUT6vurAAVkUOyGAv+rBzDdeMdBTOJPp:SY9jw/dUT62rAA2UOWWrfflOr

    • Upatre

      Upatre is a generic malware downloader.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks