Overview

overview

8

Static

static

5

4a476da312...2N.exe

windows7-x64

8

4a476da312...2N.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4a476da3124ad994c239552372e21b331f0c5e50f6443c588a4370b6274e25f2N

  • Size

    232KB

  • Sample

    241002-pf52gavhll

  • MD5

    43167f80f9c1a5f748dce2cbe625fd70

  • SHA1

    f53cd3634d24f347a66133997c2a9435eae2123c

  • SHA256

    4a476da3124ad994c239552372e21b331f0c5e50f6443c588a4370b6274e25f2

  • SHA512

    a3c6b859d2b56f2a5cd20a2f7dcaff005fa354467a4e3d9fb67c807c91002c399359a1e191d7a0b6b70b04bcbcc9cd85875c42f5bd8c3dce3c84f8bbae2b625a

  • SSDEEP

    3072:jI1i/NU8bOMYcYYcmy5cU+gTn6HOjDhWrzvvQwlgO5M1i/NU82OMYcYYamv5b:yi/NjO5YBgegD0PHzSPi/N+O7

Score
8/10
defense_evasiondiscoverypersistenceupx

Malware Config

Targets

    • Target

      4a476da3124ad994c239552372e21b331f0c5e50f6443c588a4370b6274e25f2N

    • Size

      232KB

    • MD5

      43167f80f9c1a5f748dce2cbe625fd70

    • SHA1

      f53cd3634d24f347a66133997c2a9435eae2123c

    • SHA256

      4a476da3124ad994c239552372e21b331f0c5e50f6443c588a4370b6274e25f2

    • SHA512

      a3c6b859d2b56f2a5cd20a2f7dcaff005fa354467a4e3d9fb67c807c91002c399359a1e191d7a0b6b70b04bcbcc9cd85875c42f5bd8c3dce3c84f8bbae2b625a

    • SSDEEP

      3072:jI1i/NU8bOMYcYYcmy5cU+gTn6HOjDhWrzvvQwlgO5M1i/NU82OMYcYYamv5b:yi/NjO5YBgegD0PHzSPi/N+O7

    Score
    8/10
    defense_evasiondiscoverypersistenceupx

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    • Hide Artifacts: Hidden Files and Directories

      defense_evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks