Overview

overview

7

Static

static

5

0c539e45b1...66.exe

windows7-x64

7

0c539e45b1...66.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    0c539e45b1cb09a397e9760588b855b5e8f853c38f16fc58a04477e9c937b466

  • Size

    133KB

  • Sample

    241013-xam8gawekj

  • MD5

    e9f78cdd90096ccfebfc5c72397ae1a5

  • SHA1

    49e89717bda112b5451220586ef3bfdc1d643977

  • SHA256

    0c539e45b1cb09a397e9760588b855b5e8f853c38f16fc58a04477e9c937b466

  • SHA512

    2552842c0d9769831797e70fa99b93e13096b2ddc23bc214425994360135a451716d7a6f764f7684d8a70c8709710a7495fbe35654b58b4bc990098d17ab3997

  • SSDEEP

    3072:LSE0iMZsSr5B1MYwoJNynt/37P2JIOTRaxzupspU8:LS5iMZN//0TJTxqspn

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      0c539e45b1cb09a397e9760588b855b5e8f853c38f16fc58a04477e9c937b466

    • Size

      133KB

    • MD5

      e9f78cdd90096ccfebfc5c72397ae1a5

    • SHA1

      49e89717bda112b5451220586ef3bfdc1d643977

    • SHA256

      0c539e45b1cb09a397e9760588b855b5e8f853c38f16fc58a04477e9c937b466

    • SHA512

      2552842c0d9769831797e70fa99b93e13096b2ddc23bc214425994360135a451716d7a6f764f7684d8a70c8709710a7495fbe35654b58b4bc990098d17ab3997

    • SSDEEP

      3072:LSE0iMZsSr5B1MYwoJNynt/37P2JIOTRaxzupspU8:LS5iMZN//0TJTxqspn

    Score
    7/10
    discoverypersistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks