Overview

overview

7

Static

static

8908dd0993...01.exe

windows7_x64

7

8908dd0993...01.exe

windows10-2004_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8908dd0993b3e964858095b1bbcf4101

  • Size

    390KB

  • Sample

    220521-kwky1seeak

  • MD5

    8908dd0993b3e964858095b1bbcf4101

  • SHA1

    093b08f2be8f8c56303b6c0d6a6577d362c77ac0

  • SHA256

    3bb788b0d558a8e52a71b1fcb57ee9c74ce4949a5398831fb8aad57f029f2b3d

  • SHA512

    6fa7afcf84fd4c8e64af4f9ec432a72e1beef6d1fa2336913c0b3e97f57a8f837faf9494b5e2f11af03a7154c2f18913b3ff05cb1497fff5c179fadfcc5cb4a8

Score
7/10

Malware Config

Targets

    • Target

      8908dd0993b3e964858095b1bbcf4101

    • Size

      390KB

    • MD5

      8908dd0993b3e964858095b1bbcf4101

    • SHA1

      093b08f2be8f8c56303b6c0d6a6577d362c77ac0

    • SHA256

      3bb788b0d558a8e52a71b1fcb57ee9c74ce4949a5398831fb8aad57f029f2b3d

    • SHA512

      6fa7afcf84fd4c8e64af4f9ec432a72e1beef6d1fa2336913c0b3e97f57a8f837faf9494b5e2f11af03a7154c2f18913b3ff05cb1497fff5c179fadfcc5cb4a8

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks