Overview

overview

8

Static

static

1

2e9a2b4500...ae.exe

windows7-x64

8

2e9a2b4500...ae.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    2e9a2b4500d703177b9167e03ae8b48228dc9a63fdb2ca7489b3fb6fd04c70ae

  • Size

    581KB

  • Sample

    220919-c1ct7sceh8

  • MD5

    018aeeaf4d19fd0a032a43d2580953c6

  • SHA1

    e11918c714f82d484fa7a1bdbe61d416fba76ced

  • SHA256

    2e9a2b4500d703177b9167e03ae8b48228dc9a63fdb2ca7489b3fb6fd04c70ae

  • SHA512

    d29f7d99ba5db48405337f5a95d96716ecddec196b64f43ccba4033d25dd1b8a3e41b2d3d40752fd1cde784f7c04c4c7123c0851e23fec8929e36fe6217cb361

  • SSDEEP

    12288:uoMDtCi7NFlZnNqZ9xGrLpZ0ZHEqtgb0UP:ufplNFgxG5eZngb00

Score
8/10

Malware Config

Targets

    • Target

      2e9a2b4500d703177b9167e03ae8b48228dc9a63fdb2ca7489b3fb6fd04c70ae

    • Size

      581KB

    • MD5

      018aeeaf4d19fd0a032a43d2580953c6

    • SHA1

      e11918c714f82d484fa7a1bdbe61d416fba76ced

    • SHA256

      2e9a2b4500d703177b9167e03ae8b48228dc9a63fdb2ca7489b3fb6fd04c70ae

    • SHA512

      d29f7d99ba5db48405337f5a95d96716ecddec196b64f43ccba4033d25dd1b8a3e41b2d3d40752fd1cde784f7c04c4c7123c0851e23fec8929e36fe6217cb361

    • SSDEEP

      12288:uoMDtCi7NFlZnNqZ9xGrLpZ0ZHEqtgb0UP:ufplNFgxG5eZngb00

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks