Overview

overview

10

Static

static

5

f2b2ef6c73...f2.exe

windows7-x64

10

f2b2ef6c73...f2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f2b2ef6c73ab8c35e8de3c74a4129b56ce734f495f06355a6ace47b4ec79bcf2

  • Size

    204KB

  • Sample

    241120-gdccdaskdv

  • MD5

    1db9d5458245ce03acd49950eac93847

  • SHA1

    c14fbfde5b7ae2ed298bd454b4e7f6a2cdfb3bbc

  • SHA256

    f2b2ef6c73ab8c35e8de3c74a4129b56ce734f495f06355a6ace47b4ec79bcf2

  • SHA512

    4fb815ff9024dc00cc1ffd78e7bbcd31bff248825dcca33bdd6cee5e54f792cffd24756cbf67d9953e5d48a6ad4637dc5ed2b47dca5208017ca512d8c024489c

  • SSDEEP

    768:LlvMaflJyvUc8wbjMPkG1VuW/wqvRXMXp677yCzdXZRT2Nq1MaQnepMri14PGBEu:LRltJKBlGVs4emEFb3P0lp

Score
10/10
discoveryevasionpersistenceupx

Malware Config

Targets

    • Target

      f2b2ef6c73ab8c35e8de3c74a4129b56ce734f495f06355a6ace47b4ec79bcf2

    • Size

      204KB

    • MD5

      1db9d5458245ce03acd49950eac93847

    • SHA1

      c14fbfde5b7ae2ed298bd454b4e7f6a2cdfb3bbc

    • SHA256

      f2b2ef6c73ab8c35e8de3c74a4129b56ce734f495f06355a6ace47b4ec79bcf2

    • SHA512

      4fb815ff9024dc00cc1ffd78e7bbcd31bff248825dcca33bdd6cee5e54f792cffd24756cbf67d9953e5d48a6ad4637dc5ed2b47dca5208017ca512d8c024489c

    • SSDEEP

      768:LlvMaflJyvUc8wbjMPkG1VuW/wqvRXMXp677yCzdXZRT2Nq1MaQnepMri14PGBEu:LRltJKBlGVs4emEFb3P0lp

    Score
    10/10
    discoveryevasionpersistenceupx

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks