Overview

overview

7

Static

static

5

57c4f7e88a...4a.exe

windows7-x64

7

57c4f7e88a...4a.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    57c4f7e88af26729285e805069a8c145647de4a8ab3b12aad4c70371d098b34a.exe

  • Size

    29KB

  • Sample

    241119-rfvxls1rar

  • MD5

    2591a5d995954e457557e80f83c60f72

  • SHA1

    1e858f06c3054f5c73dafe02ef938aa815c393cd

  • SHA256

    57c4f7e88af26729285e805069a8c145647de4a8ab3b12aad4c70371d098b34a

  • SHA512

    8fe57df256f3b7b154d364e2be728f3798bd271d91e4e8051be828dfd247f85c096336d200bab9b00741f2b3b35053db82cfb7b133f21eb4ce9e764861b8a7c5

  • SSDEEP

    384:6gvlQoGKdivmICib0666666666RJ70uIabjbt3TUAKoYQW9EsHyLR7Uq3t3jefQJ:x2oGKdJ5i0uIaOUYP2C+3jeonJ

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      57c4f7e88af26729285e805069a8c145647de4a8ab3b12aad4c70371d098b34a.exe

    • Size

      29KB

    • MD5

      2591a5d995954e457557e80f83c60f72

    • SHA1

      1e858f06c3054f5c73dafe02ef938aa815c393cd

    • SHA256

      57c4f7e88af26729285e805069a8c145647de4a8ab3b12aad4c70371d098b34a

    • SHA512

      8fe57df256f3b7b154d364e2be728f3798bd271d91e4e8051be828dfd247f85c096336d200bab9b00741f2b3b35053db82cfb7b133f21eb4ce9e764861b8a7c5

    • SSDEEP

      384:6gvlQoGKdivmICib0666666666RJ70uIabjbt3TUAKoYQW9EsHyLR7Uq3t3jefQJ:x2oGKdJ5i0uIaOUYP2C+3jeonJ

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks