Overview

overview

9

Static

static

5

calc.exe

windows7-x64

9

calc.exe

windows10-2004-x64

9

out.exe

windows7-x64

out.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    calc.exe

  • Size

    201KB

  • Sample

    241004-3at9nswerb

  • MD5

    2f9fdad776d8626f2ce8625211831e91

  • SHA1

    21d8413eb0d60b36fc249f8025c277b557fefde3

  • SHA256

    9b66a8ea0f1c64965b06e7a45afbe56f2d4e6d5ef65f32446defccbebe730813

  • SHA512

    2abd61c6bea7c748f81cdd18133582217bd06dd19506f13f89953f8c7bd662fc5233540b9f56c57aa94e038c674128fc46dd280e2f7db642343fc5a45da25feb

  • SSDEEP

    6144:96LkVO8A1X2og0tEHH45Y0KTIVaTycTVDNe4oI:TMJ1X2og0MHGKT3RRwG

Score
9/10
discoveryexecutionupx

Malware Config

Targets

    • Target

      calc.exe

    • Size

      201KB

    • MD5

      2f9fdad776d8626f2ce8625211831e91

    • SHA1

      21d8413eb0d60b36fc249f8025c277b557fefde3

    • SHA256

      9b66a8ea0f1c64965b06e7a45afbe56f2d4e6d5ef65f32446defccbebe730813

    • SHA512

      2abd61c6bea7c748f81cdd18133582217bd06dd19506f13f89953f8c7bd662fc5233540b9f56c57aa94e038c674128fc46dd280e2f7db642343fc5a45da25feb

    • SSDEEP

      6144:96LkVO8A1X2og0tEHH45Y0KTIVaTycTVDNe4oI:TMJ1X2og0MHGKT3RRwG

    Score
    9/10
    discoveryexecutionupx

    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      out.upx

    • Size

      419KB

    • MD5

      1324b4827715d0b007ec0eb5384e7382

    • SHA1

      e28932be47eca4356e82d0b55d3bf6f316c3f77b

    • SHA256

      5b85c5e041c2e5c9c6a1d7901e1c1a1cbdc7b26df9ab1659370f1f5d9be9324f

    • SHA512

      4c7d459bfd8a0bceb02e19521a0586e03731631b931884f17c43c758b0f13bf22553ceee54d869db88be11e4ea1b76d71c214d84f0f888bd2ce7642e64a16cfb

    • SSDEEP

      6144:9fv4sIND/AB4jYWoyGN2Ik5AfPjFWFNAy/7+dOYG+BW:hABhABEXotkI0A8AyzKOc

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks