Overview

overview

8

Static

static

5

ed9667b890...02.exe

windows7-x64

8

ed9667b890...02.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ed9667b890f359d738fde07e16d7908bd68111a4531b70ea115b0fc8366bc402.exe

  • Size

    55KB

  • Sample

    241203-wcjsds1qhm

  • MD5

    fd1784bae0ceedd9cc3854dda28f4052

  • SHA1

    7374edbed0783ace14e2518516bfa2d4f8876847

  • SHA256

    ed9667b890f359d738fde07e16d7908bd68111a4531b70ea115b0fc8366bc402

  • SHA512

    bfce161bcd9aafcd93b5e45cee6ff00c045b37cc30fd32e336348bd22a10f294554e98948897e5ef376272e986c652138052b5e324985eb32c0b7da819e9759c

  • SSDEEP

    1536:jhBZ1b9c409y1G1i35Bo01i/gcU8eVTOK/YqjYYamvbtbu:DZl2zoxV1i/NU82OMYcYYamv5bu

Score
8/10
defense_evasiondiscoverypersistenceupx

Malware Config

Targets

    • Target

      ed9667b890f359d738fde07e16d7908bd68111a4531b70ea115b0fc8366bc402.exe

    • Size

      55KB

    • MD5

      fd1784bae0ceedd9cc3854dda28f4052

    • SHA1

      7374edbed0783ace14e2518516bfa2d4f8876847

    • SHA256

      ed9667b890f359d738fde07e16d7908bd68111a4531b70ea115b0fc8366bc402

    • SHA512

      bfce161bcd9aafcd93b5e45cee6ff00c045b37cc30fd32e336348bd22a10f294554e98948897e5ef376272e986c652138052b5e324985eb32c0b7da819e9759c

    • SSDEEP

      1536:jhBZ1b9c409y1G1i35Bo01i/gcU8eVTOK/YqjYYamvbtbu:DZl2zoxV1i/NU82OMYcYYamv5bu

    Score
    8/10
    defense_evasiondiscoverypersistenceupx

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    • Hide Artifacts: Hidden Files and Directories

      defense_evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks