Overview

overview

8

Static

static

5f3a2f2dd8...ba.exe

windows7-x64

8

5f3a2f2dd8...ba.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    5f3a2f2dd8efd75e8bd200fcd8f9c1e16ba65e59a13fbf50e74726c11953c8ba

  • Size

    9.2MB

  • Sample

    220919-1k85gaafa5

  • MD5

    150f85e774b99c4e506f0925be7f50de

  • SHA1

    6e3643cd348f72ec4d2a074ac99e3b70c4f3011d

  • SHA256

    5f3a2f2dd8efd75e8bd200fcd8f9c1e16ba65e59a13fbf50e74726c11953c8ba

  • SHA512

    4d878b7b524d275b81b513aef897d904812f76d8a59dd5ea208ddb4d9867a5cda11a934ec197cdab257acd39dec8dde963f0213cb1290867fdb2e9e50410faff

  • SSDEEP

    196608:PH50fSzHXxF23x6y6kp1S7I05v95vi1zwrlk:PHj363YEYU05v9ANwrlk

Score
8/10

Malware Config

Targets

    • Target

      5f3a2f2dd8efd75e8bd200fcd8f9c1e16ba65e59a13fbf50e74726c11953c8ba

    • Size

      9.2MB

    • MD5

      150f85e774b99c4e506f0925be7f50de

    • SHA1

      6e3643cd348f72ec4d2a074ac99e3b70c4f3011d

    • SHA256

      5f3a2f2dd8efd75e8bd200fcd8f9c1e16ba65e59a13fbf50e74726c11953c8ba

    • SHA512

      4d878b7b524d275b81b513aef897d904812f76d8a59dd5ea208ddb4d9867a5cda11a934ec197cdab257acd39dec8dde963f0213cb1290867fdb2e9e50410faff

    • SSDEEP

      196608:PH50fSzHXxF23x6y6kp1S7I05v95vi1zwrlk:PHj363YEYU05v9ANwrlk

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks