Overview

overview

8

Static

static

SecuriteIn...33.exe

windows7-x64

8

SecuriteIn...33.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    SecuriteInfo.com.BScope.Adware.Searcher.10533.exe

  • Size

    2.5MB

  • Sample

    220909-gek1xageg2

  • MD5

    b7ad583979099b800db79a1dc6c7423a

  • SHA1

    324f9df08052bb1c2c1062057f26ae065f6ef1bf

  • SHA256

    d4a65beb44a941913e8a34d50f9932e45832a453725e58d6eb7ed3815ab4fca8

  • SHA512

    f28adc3b2b3b59c1c03ac731d74963379a064ea9255e051d0a76b1b9391e007a85cda2b340be97a868ffdd7d0450b97e45d1333272f34059e42b91a00c65e144

  • SSDEEP

    49152:LQDxO8/GZlXs06kXMtWvaiJLCQeD0hbLogisuBLwswQRNmksH:LQ8LFekXMtWyiJsDcbLoRr5hwUm/H

Score
8/10

Malware Config

Targets

    • Target

      SecuriteInfo.com.BScope.Adware.Searcher.10533.exe

    • Size

      2.5MB

    • MD5

      b7ad583979099b800db79a1dc6c7423a

    • SHA1

      324f9df08052bb1c2c1062057f26ae065f6ef1bf

    • SHA256

      d4a65beb44a941913e8a34d50f9932e45832a453725e58d6eb7ed3815ab4fca8

    • SHA512

      f28adc3b2b3b59c1c03ac731d74963379a064ea9255e051d0a76b1b9391e007a85cda2b340be97a868ffdd7d0450b97e45d1333272f34059e42b91a00c65e144

    • SSDEEP

      49152:LQDxO8/GZlXs06kXMtWvaiJLCQeD0hbLogisuBLwswQRNmksH:LQ8LFekXMtWyiJsDcbLoRr5hwUm/H

    Score
    8/10

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks