Overview

overview

7

Static

static

7

d4cc8aee4f...ab.exe

windows7-x64

7

d4cc8aee4f...ab.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d4cc8aee4fe266195abcb3e634ce0e98ed166e11ea8de616621c1bc3df20dbab

  • Size

    56KB

  • Sample

    240705-dvjagateqg

  • MD5

    0705331699f48cfbc0cd69dc3d6d88de

  • SHA1

    39162dfabee346ea906154e111a2ae540a5996b1

  • SHA256

    d4cc8aee4fe266195abcb3e634ce0e98ed166e11ea8de616621c1bc3df20dbab

  • SHA512

    bb2a9e495945d227d178461788afce26c1109f11d9c4e7efd8a9e4426e1d5c2773f9b8d75b66c760e8e9c2006897077ff0d6fa69c57aab309309eefaea076547

  • SSDEEP

    768:r8eRH+MlFh0pDpuJ84WEi+U6sh7iQroCHmyf+RjFBSuB2Xpfssj:r9l+W8xFt6sh7iQroCoRB0u0ssj

Score
7/10
upx

Malware Config

Targets

    • Target

      d4cc8aee4fe266195abcb3e634ce0e98ed166e11ea8de616621c1bc3df20dbab

    • Size

      56KB

    • MD5

      0705331699f48cfbc0cd69dc3d6d88de

    • SHA1

      39162dfabee346ea906154e111a2ae540a5996b1

    • SHA256

      d4cc8aee4fe266195abcb3e634ce0e98ed166e11ea8de616621c1bc3df20dbab

    • SHA512

      bb2a9e495945d227d178461788afce26c1109f11d9c4e7efd8a9e4426e1d5c2773f9b8d75b66c760e8e9c2006897077ff0d6fa69c57aab309309eefaea076547

    • SSDEEP

      768:r8eRH+MlFh0pDpuJ84WEi+U6sh7iQroCHmyf+RjFBSuB2Xpfssj:r9l+W8xFt6sh7iQroCoRB0u0ssj

    Score
    7/10
    upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks