Overview

overview

10

Static

static

3

db8840ce28...2a.exe

windows7-x64

10

db8840ce28...2a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    db8840ce28ebc2966b3bb34a246951a7e7a92eed0ac28b369e91b4324c5bb72a

  • Size

    39KB

  • Sample

    240306-b8b27sff2w

  • MD5

    e877faf412c2cd0d214313b421017795

  • SHA1

    4a587671bb3644192f852bc92f0a35e23695489a

  • SHA256

    db8840ce28ebc2966b3bb34a246951a7e7a92eed0ac28b369e91b4324c5bb72a

  • SHA512

    14afa42b17cca60abf2f3dc5e534f1e433ccccaafbf3c9833875cf5c978499000a3bd6840bae1a0f4848dc8a35555b9a2c3e64ac57f7e737adb7c17a08a89f28

  • SSDEEP

    768:kf1Y9RRw/dUT6vurGd/pkUOyGAv+rh95k5AY0IAyMLuJdL3YTCjL6T8:GY9jw/dUT62rGdiUOWWrNmAmiT8

Score
10/10
upatredownloader

Malware Config

Targets

    • Target

      db8840ce28ebc2966b3bb34a246951a7e7a92eed0ac28b369e91b4324c5bb72a

    • Size

      39KB

    • MD5

      e877faf412c2cd0d214313b421017795

    • SHA1

      4a587671bb3644192f852bc92f0a35e23695489a

    • SHA256

      db8840ce28ebc2966b3bb34a246951a7e7a92eed0ac28b369e91b4324c5bb72a

    • SHA512

      14afa42b17cca60abf2f3dc5e534f1e433ccccaafbf3c9833875cf5c978499000a3bd6840bae1a0f4848dc8a35555b9a2c3e64ac57f7e737adb7c17a08a89f28

    • SSDEEP

      768:kf1Y9RRw/dUT6vurGd/pkUOyGAv+rh95k5AY0IAyMLuJdL3YTCjL6T8:GY9jw/dUT62rGdiUOWWrNmAmiT8

    Score
    10/10
    upatredownloader

    • Upatre

      Upatre is a generic malware downloader.

      downloaderupatre

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks