Overview

overview

7

Static

static

21ddbef7a8...7a.exe

windows7_x64

7

21ddbef7a8...7a.exe

windows10-2004_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21ddbef7a8d998786b0b7acf5677fecf35bd7cc00b973850b6709671c3fff37a

  • Size

    235KB

  • Sample

    220612-h1fhzsfdf9

  • MD5

    4b53491b53623cc0a8616eaedea6f81c

  • SHA1

    db2ea45c85e25dedf3e4a332b3bcd2b94e12ac3f

  • SHA256

    21ddbef7a8d998786b0b7acf5677fecf35bd7cc00b973850b6709671c3fff37a

  • SHA512

    01a2de0218babfa5a280fcd77a6a1ad681b124b2836b113cb161255b94ce13060b11412a26052b2cfda002b62e20c4d64fc76aa48941b9eb763d54ee0b1e109d

Score
7/10
discovery

Malware Config

Targets

    • Target

      21ddbef7a8d998786b0b7acf5677fecf35bd7cc00b973850b6709671c3fff37a

    • Size

      235KB

    • MD5

      4b53491b53623cc0a8616eaedea6f81c

    • SHA1

      db2ea45c85e25dedf3e4a332b3bcd2b94e12ac3f

    • SHA256

      21ddbef7a8d998786b0b7acf5677fecf35bd7cc00b973850b6709671c3fff37a

    • SHA512

      01a2de0218babfa5a280fcd77a6a1ad681b124b2836b113cb161255b94ce13060b11412a26052b2cfda002b62e20c4d64fc76aa48941b9eb763d54ee0b1e109d

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Modifies file permissions

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

1
T1158

Privilege Escalation

Defense Evasion

File Permissions Modification

1
T1222

Hidden Files and Directories

1
T1158

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks