Overview

overview

7

Static

static

169D79AF38...E8.exe

windows7_x64

7

169D79AF38...E8.exe

windows10-2004_x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    169D79AF3834F5F085F6A0DB4E757708B581FB5CD324D0EB4D1AD1F18139EBE8.exe
  • Size 2.5MB
  • Sample220607-mt3gdshfdl
  • SHA256 169d79af3834f5f085f6a0db4e757708b581fb5cd324d0eb4d1ad1f18139ebe8
  • MD5 SHA1 SHA512
Score
7/10
discoverypersistence

Malware Config

Targets

    • Target
      169D79AF3834F5F085F6A0DB4E757708B581FB5CD324D0EB4D1AD1F18139EBE8.exe
    • Size 2.5MB
    • SHA256 169d79af3834f5f085f6a0db4e757708b581fb5cd324d0eb4d1ad1f18139ebe8
    • MD5 SHA1 SHA512
    Score
    7/10
    discoverypersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks