Overview

overview

8

Static

static

83fc54ed06...fb.exe

windows7-x64

8

83fc54ed06...fb.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    83fc54ed061ecb58cf5d0b134a8949fb.exe

  • Size

    149KB

  • Sample

    220915-jjpk1acce2

  • MD5

    83fc54ed061ecb58cf5d0b134a8949fb

  • SHA1

    f7086995b6486af44a3f1416b029b7f007e027da

  • SHA256

    c8566146b58f73b9051f3046fb7e324d0be71e31adbf271fd25acaf94a6c767b

  • SHA512

    254f2c862ea3e9a2e85005e2262cc3bf1acf510761cb45c131ce340181b2a4ad221e2bf7e2364aeaa0f8fb010ac353af6eb9ea53686d449ab6e3588d35e91365

  • SSDEEP

    1536:sOzj7H6TEsvDHtvdddddgFJZVM0xf0xiX05q/ARE1lRDf/3bITkkToplLBuHp2Ax:hb98wK0N020IOORD3bITXo7Dwj

Score
8/10
persistence

Malware Config

Targets

    • Target

      83fc54ed061ecb58cf5d0b134a8949fb.exe

    • Size

      149KB

    • MD5

      83fc54ed061ecb58cf5d0b134a8949fb

    • SHA1

      f7086995b6486af44a3f1416b029b7f007e027da

    • SHA256

      c8566146b58f73b9051f3046fb7e324d0be71e31adbf271fd25acaf94a6c767b

    • SHA512

      254f2c862ea3e9a2e85005e2262cc3bf1acf510761cb45c131ce340181b2a4ad221e2bf7e2364aeaa0f8fb010ac353af6eb9ea53686d449ab6e3588d35e91365

    • SSDEEP

      1536:sOzj7H6TEsvDHtvdddddgFJZVM0xf0xiX05q/ARE1lRDf/3bITkkToplLBuHp2Ax:hb98wK0N020IOORD3bITXo7Dwj

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks