Overview

overview

8

Static

static

a6d6c61abc...09.exe

windows7_x64

8

a6d6c61abc...09.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a6d6c61abceaf198e932736c916c54fde1e5ee271cf13a582437d05df0e9f009

  • Size

    1.1MB

  • Sample

    210505-l8t6p5bj6a

  • MD5

    b5b75d648cdcb67b574af4bcb814549a

  • SHA1

    bec087f2a4357d72f27225f0097006da11a40325

  • SHA256

    a6d6c61abceaf198e932736c916c54fde1e5ee271cf13a582437d05df0e9f009

  • SHA512

    5498dece9e9d92a647859ba6f66e337314bda17f502e962c33827e44a70611a41d028804c4070ab39122845260f726827be6ed48f2e24c720f4e0867bd34e147

Score
8/10
macropersistence

Malware Config

Targets

    • Target

      a6d6c61abceaf198e932736c916c54fde1e5ee271cf13a582437d05df0e9f009

    • Size

      1.1MB

    • MD5

      b5b75d648cdcb67b574af4bcb814549a

    • SHA1

      bec087f2a4357d72f27225f0097006da11a40325

    • SHA256

      a6d6c61abceaf198e932736c916c54fde1e5ee271cf13a582437d05df0e9f009

    • SHA512

      5498dece9e9d92a647859ba6f66e337314bda17f502e962c33827e44a70611a41d028804c4070ab39122845260f726827be6ed48f2e24c720f4e0867bd34e147

    Score
    8/10
    persistencemacro

    • Executes dropped EXE

    • Suspicious Office macro

      Office document equipped with macros.

      macro

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks