Overview

overview

10

Static

static

5

02d4b06808...f9.exe

windows7-x64

10

02d4b06808...f9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02d4b06808df5436a3d5e981abbc46b17b95f37a54c9740783a30f9426296ef9

  • Size

    204KB

  • Sample

    241122-xxzj1ssngr

  • MD5

    fc71a7b675005fc4b3cf9c5606b42f8f

  • SHA1

    087ad97ce0975ef83d298c061224faaf553090e7

  • SHA256

    02d4b06808df5436a3d5e981abbc46b17b95f37a54c9740783a30f9426296ef9

  • SHA512

    e51dee5cc7aed2244506838757dfb4733471b28542d7083f0abacec05905e82aaba9951cdeadeaa6f8aa92e0b05ec1928382aa00f86ee7fcaa431ce407f22781

  • SSDEEP

    768:LlvMajCJX9wWQwbjMPkG1VuW/wqvRXMXp677yCzdXZRT2Nq1MaQnepMri14PGBEu:LRlmJtwWFlGVs4emEFb3P0lp

Score
10/10
discoveryevasionpersistenceupx

Malware Config

Targets

    • Target

      02d4b06808df5436a3d5e981abbc46b17b95f37a54c9740783a30f9426296ef9

    • Size

      204KB

    • MD5

      fc71a7b675005fc4b3cf9c5606b42f8f

    • SHA1

      087ad97ce0975ef83d298c061224faaf553090e7

    • SHA256

      02d4b06808df5436a3d5e981abbc46b17b95f37a54c9740783a30f9426296ef9

    • SHA512

      e51dee5cc7aed2244506838757dfb4733471b28542d7083f0abacec05905e82aaba9951cdeadeaa6f8aa92e0b05ec1928382aa00f86ee7fcaa431ce407f22781

    • SSDEEP

      768:LlvMajCJX9wWQwbjMPkG1VuW/wqvRXMXp677yCzdXZRT2Nq1MaQnepMri14PGBEu:LRlmJtwWFlGVs4emEFb3P0lp

    Score
    10/10
    discoveryevasionpersistenceupx

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks