Overview

overview

8

Static

static

7

2aa0325ff0...aN.exe

windows7-x64

8

2aa0325ff0...aN.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    2aa0325ff08421ac6e5644d98ae20f90862910cfcea899c5d009e5fe72bffe5aN

  • Size

    232KB

  • Sample

    240921-kveqlstgrj

  • MD5

    e2b911be24eeeedb2024a8ee9dfabe90

  • SHA1

    c58de4d5c0ebb0b831aef9999079505a72e74bd4

  • SHA256

    2aa0325ff08421ac6e5644d98ae20f90862910cfcea899c5d009e5fe72bffe5a

  • SHA512

    61986dcdee5a449b894366303f7c112a5e09717486b5e7a0de82b3f76087ebf832fdf90d9566868f683684d26578afd738ce5a607f14279fd3b91bf46d579e5f

  • SSDEEP

    3072:61i/NU8bOMYcYYcmy51VRgiFCpCIXUWOLTsEsigcL3P6xxc1VOz1i/NU82OMYcYU:ki/NjO5xbg/CSUFLTwMjs6oi/N+O7

Score
8/10
defense_evasiondiscoverypersistenceupx

Malware Config

Targets

    • Target

      2aa0325ff08421ac6e5644d98ae20f90862910cfcea899c5d009e5fe72bffe5aN

    • Size

      232KB

    • MD5

      e2b911be24eeeedb2024a8ee9dfabe90

    • SHA1

      c58de4d5c0ebb0b831aef9999079505a72e74bd4

    • SHA256

      2aa0325ff08421ac6e5644d98ae20f90862910cfcea899c5d009e5fe72bffe5a

    • SHA512

      61986dcdee5a449b894366303f7c112a5e09717486b5e7a0de82b3f76087ebf832fdf90d9566868f683684d26578afd738ce5a607f14279fd3b91bf46d579e5f

    • SSDEEP

      3072:61i/NU8bOMYcYYcmy51VRgiFCpCIXUWOLTsEsigcL3P6xxc1VOz1i/NU82OMYcYU:ki/NjO5xbg/CSUFLTwMjs6oi/N+O7

    Score
    8/10
    defense_evasiondiscoverypersistenceupx

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    • Hide Artifacts: Hidden Files and Directories

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks