Overview

overview

8

Static

static

13ef0feaa3...44.exe

windows7_x64

8

13ef0feaa3...44.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    13ef0feaa39b03987dd72e5ab5e08f0de8f7925f683179de80025e28ddc80344.zip

  • Size

    157KB

  • Sample

    210907-y5me4agecr

  • MD5

    684b44dfe3cbee4fc8bcf6ce7606bcac

  • SHA1

    50c88a28e3e189b07a5ba21c824946aa50ac8ad5

  • SHA256

    907e539fe373286111bcd3c7e83e81df869b0bbd4e68a73f6a1c17032dc6777b

  • SHA512

    c5eab386d65964ea304ff5d64505509b4157c6e8a35b0abf05a97fd0890eeef441f52164a64b0879f9c7e04afa23b1ccdb33ed1cc6e8bad561ea31d0e3da691b

Score
8/10
adware

Malware Config

Targets

    • Target

      13ef0feaa39b03987dd72e5ab5e08f0de8f7925f683179de80025e28ddc80344

    • Size

      1.1MB

    • MD5

      a530bd0664621d64bfa6b22ea420f3fd

    • SHA1

      4492405afb86ad80fe83eae49c1889654bd03c3e

    • SHA256

      13ef0feaa39b03987dd72e5ab5e08f0de8f7925f683179de80025e28ddc80344

    • SHA512

      e3bb63ff17d25f3691b6d25ea459300e4e17e661b08d414fe0b8b6310d1b2e4b021e08800f1b8d01bca0431a2967900cb1ed540ba11ea7682c2493dcaa163c3c

    Score
    8/10
    adware

    • Allows Chrome notifications for new domains

      adware

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks