General

  • Target

    STDUViewer_All_Eng.exe

  • Size

    2.3MB

  • Sample

    241119-p9plks1mbr

  • MD5

    2b313ceea938698985abf3cb5daa8d7e

  • SHA1

    9001d7d3a51a317bda2fbdb5ccf1dc683fe1945e

  • SHA256

    dcbdba6d2298279178bafaf706ab8f12209e48c346f5795621b100f1ca17fe1d

  • SHA512

    c90a7a73539ba02a162d4fb976908d773388d1939269af26e1f51485217301de0b9a6c7b01c240bbf15bf5ded39bd5999d74880869735cde3e4f9129c4123dba

  • SSDEEP

    49152:jdN6hCuDE1RhJ8MJ6Q2CULxIliGxIbjUfeOjX8MGf+o/ZyH6CFlCg9nu536r:jdNQCuDEhYyiBUfnjM5fVw7CgJTr

Score
7/10

Malware Config

Targets

    • Target

      STDUViewer_All_Eng.exe

    • Size

      2.3MB

    • MD5

      2b313ceea938698985abf3cb5daa8d7e

    • SHA1

      9001d7d3a51a317bda2fbdb5ccf1dc683fe1945e

    • SHA256

      dcbdba6d2298279178bafaf706ab8f12209e48c346f5795621b100f1ca17fe1d

    • SHA512

      c90a7a73539ba02a162d4fb976908d773388d1939269af26e1f51485217301de0b9a6c7b01c240bbf15bf5ded39bd5999d74880869735cde3e4f9129c4123dba

    • SSDEEP

      49152:jdN6hCuDE1RhJ8MJ6Q2CULxIliGxIbjUfeOjX8MGf+o/ZyH6CFlCg9nu536r:jdNQCuDEhYyiBUfnjM5fVw7CgJTr

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks