Overview

overview

7

Static

static

5

f58c0f4111...f9.exe

windows7-x64

7

f58c0f4111...f9.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f58c0f41112399380d872030fb6cbc7d9d2c9e57f99fbc6b229c39a92535a0f9.exe

  • Size

    65KB

  • Sample

    241130-fwjczatqdw

  • MD5

    54e66221e44a9d2d212b5d8a23868a3f

  • SHA1

    f4e3306310f965f7a9172aef401d1067c5a276f0

  • SHA256

    f58c0f41112399380d872030fb6cbc7d9d2c9e57f99fbc6b229c39a92535a0f9

  • SHA512

    270f5500aa0e8bac87489fa6d4083234ea7f9f3e6065f526b999534a6dbd5419cb61b094b56163a8ce2913ca0a3f6cecf4011dfce6ae9b2abb124398f5688367

  • SSDEEP

    768:r8eRH+MlFh0pDpuJ84WEi+U6sh7iQroCHmyf+RjFBSuB2Xpfs14fu5:r9l+W8xFt6sh7iQroCoRB0u0sefG

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      f58c0f41112399380d872030fb6cbc7d9d2c9e57f99fbc6b229c39a92535a0f9.exe

    • Size

      65KB

    • MD5

      54e66221e44a9d2d212b5d8a23868a3f

    • SHA1

      f4e3306310f965f7a9172aef401d1067c5a276f0

    • SHA256

      f58c0f41112399380d872030fb6cbc7d9d2c9e57f99fbc6b229c39a92535a0f9

    • SHA512

      270f5500aa0e8bac87489fa6d4083234ea7f9f3e6065f526b999534a6dbd5419cb61b094b56163a8ce2913ca0a3f6cecf4011dfce6ae9b2abb124398f5688367

    • SSDEEP

      768:r8eRH+MlFh0pDpuJ84WEi+U6sh7iQroCHmyf+RjFBSuB2Xpfs14fu5:r9l+W8xFt6sh7iQroCoRB0u0sefG

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks