Overview

overview

7

Static

static

5

6ba8779875...2N.exe

windows7-x64

7

6ba8779875...2N.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    6ba8779875a1b883dd5bf4ebf33ec5027c89345fb8719e5d0278705fe04c15e2N

  • Size

    718KB

  • Sample

    241006-cbcsxazanq

  • MD5

    0fb27cd51c948b1fb929730609ed20a0

  • SHA1

    3f13b4a94c393fcd6c1d26fabefdaecc1e8ac7e9

  • SHA256

    6ba8779875a1b883dd5bf4ebf33ec5027c89345fb8719e5d0278705fe04c15e2

  • SHA512

    202184e098b5ae49c9d4e77ff59867d384c23fd8901b61a37954d9d8fc392138770f70e919974b34ed5fc262064b6e02734d3d70439dc566c1db1e55abfc971c

  • SSDEEP

    12288:4eKrJJuf86AYcwo8oSAcNEMZMAFOVhEce7Zaxb7eInfX6Kt6supy3HZUvz30:4ruf/AfwKcLLFRHZaxb7eoKqZUvr0

Score
7/10
discoveryexecutionpersistenceupx

Malware Config

Targets

    • Target

      6ba8779875a1b883dd5bf4ebf33ec5027c89345fb8719e5d0278705fe04c15e2N

    • Size

      718KB

    • MD5

      0fb27cd51c948b1fb929730609ed20a0

    • SHA1

      3f13b4a94c393fcd6c1d26fabefdaecc1e8ac7e9

    • SHA256

      6ba8779875a1b883dd5bf4ebf33ec5027c89345fb8719e5d0278705fe04c15e2

    • SHA512

      202184e098b5ae49c9d4e77ff59867d384c23fd8901b61a37954d9d8fc392138770f70e919974b34ed5fc262064b6e02734d3d70439dc566c1db1e55abfc971c

    • SSDEEP

      12288:4eKrJJuf86AYcwo8oSAcNEMZMAFOVhEce7Zaxb7eInfX6Kt6supy3HZUvz30:4ruf/AfwKcLLFRHZaxb7eoKqZUvr0

    Score
    7/10
    discoveryexecutionpersistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks