Overview

overview

10

Static

static

3

apkeasytool.exe

windows10-ltsc_2021-x64

10

Resubmissions

28/03/2025, 22:46

250328-2p9r8svlw2 3

27/03/2025, 19:17

250327-xzhpaaw1av 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    apkeasytool.exe

  • Size

    1.9MB

  • Sample

    250327-xzhpaaw1av

  • MD5

    ecd05b7c5af91af8b7264d5dbdea1d68

  • SHA1

    58a9b57885ca2935026723df9c23a84dcbef4936

  • SHA256

    4c686d554c2e323030f0ac7d9dc7cf179ae59273ab5edc35d837e1afa7e5db7a

  • SHA512

    603cd417e50b2c4f24a4fc4647d0d40d43ad5041928cc8093f4c1dd9e7b973d73c84de5fe51ef3c31e80c4c1e4cea57214b0cbe6f1306a1690015b94f6d2fedc

  • SSDEEP

    24576:LKySd3yqpKeJjeD8nV4YNgBv689CIcLfz3ZP9F8nVWTyFoBkkAu:NSd34Y4fcpP8nVFan

Score
10/10
emotetbankerdefense_evasiondiscoveryexecutiontrojanupx

Malware Config

Targets

    • Target

      apkeasytool.exe

    • Size

      1.9MB

    • MD5

      ecd05b7c5af91af8b7264d5dbdea1d68

    • SHA1

      58a9b57885ca2935026723df9c23a84dcbef4936

    • SHA256

      4c686d554c2e323030f0ac7d9dc7cf179ae59273ab5edc35d837e1afa7e5db7a

    • SHA512

      603cd417e50b2c4f24a4fc4647d0d40d43ad5041928cc8093f4c1dd9e7b973d73c84de5fe51ef3c31e80c4c1e4cea57214b0cbe6f1306a1690015b94f6d2fedc

    • SSDEEP

      24576:LKySd3yqpKeJjeD8nV4YNgBv689CIcLfz3ZP9F8nVWTyFoBkkAu:NSd34Y4fcpP8nVFan

    Score
    10/10
    emotetbankerdefense_evasiondiscoveryexecutiontrojanupx

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Emotet family

      emotet

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks