Overview

overview

7

Static

static

0af412e014...41.exe

windows7_x64

7

0af412e014...41.exe

windows10-2004_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0af412e0143612421adb293c6001cbb2c1bb45b7b076b897e582757c0c199e41

  • Size

    234KB

  • Sample

    220530-f5dh3sedg7

  • MD5

    28713700cc4cf8795a8766fe420e4696

  • SHA1

    d56b0cef59368a5753c43037ca6cc9e4b33b11a7

  • SHA256

    0af412e0143612421adb293c6001cbb2c1bb45b7b076b897e582757c0c199e41

  • SHA512

    5b9fe21edecc4d23fee40fe05b4566bf17a341af6c0f63f5f62afbd1b6d71b9ab9bf2e0b34248c9a3e90f117fa0cc19d32cadb70bcb7cbb3324c0e07f8fbbd74

Score
7/10
discovery

Malware Config

Targets

    • Target

      0af412e0143612421adb293c6001cbb2c1bb45b7b076b897e582757c0c199e41

    • Size

      234KB

    • MD5

      28713700cc4cf8795a8766fe420e4696

    • SHA1

      d56b0cef59368a5753c43037ca6cc9e4b33b11a7

    • SHA256

      0af412e0143612421adb293c6001cbb2c1bb45b7b076b897e582757c0c199e41

    • SHA512

      5b9fe21edecc4d23fee40fe05b4566bf17a341af6c0f63f5f62afbd1b6d71b9ab9bf2e0b34248c9a3e90f117fa0cc19d32cadb70bcb7cbb3324c0e07f8fbbd74

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Modifies file permissions

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

1
T1158

Privilege Escalation

Defense Evasion

File Permissions Modification

1
T1222

Hidden Files and Directories

1
T1158

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks