Overview

overview

7

Static

static

5

9be6101bea...3N.exe

windows7-x64

7

9be6101bea...3N.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    9be6101beafd7ec969cb5a8b1040a92e87b65f2f4b5c1e44ae569a85b1a79c93N

  • Size

    171KB

  • Sample

    240927-c9n9lathqa

  • MD5

    0da9803e462efde54052495544ed2a40

  • SHA1

    380595ab215fad6fd3b9be7ab3e967d7a15e454a

  • SHA256

    9be6101beafd7ec969cb5a8b1040a92e87b65f2f4b5c1e44ae569a85b1a79c93

  • SHA512

    83b966ed6827f6a8e5cac9895af003367e0e0da10a046326f2acdba9ddf7dada2b383d09b870e7dd09117ba66cc9468b8521820227268cb31de8e9056d4327b8

  • SSDEEP

    1536:q4cXcImuCW0tLbIijQqkCBGxkxtoTgh+0mlFcR9vLMFX:qDXc7W0to5CBHoTgh+0SCR9v2

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      9be6101beafd7ec969cb5a8b1040a92e87b65f2f4b5c1e44ae569a85b1a79c93N

    • Size

      171KB

    • MD5

      0da9803e462efde54052495544ed2a40

    • SHA1

      380595ab215fad6fd3b9be7ab3e967d7a15e454a

    • SHA256

      9be6101beafd7ec969cb5a8b1040a92e87b65f2f4b5c1e44ae569a85b1a79c93

    • SHA512

      83b966ed6827f6a8e5cac9895af003367e0e0da10a046326f2acdba9ddf7dada2b383d09b870e7dd09117ba66cc9468b8521820227268cb31de8e9056d4327b8

    • SSDEEP

      1536:q4cXcImuCW0tLbIijQqkCBGxkxtoTgh+0mlFcR9vLMFX:qDXc7W0to5CBHoTgh+0SCR9v2

    Score
    7/10
    discoverypersistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks