Overview

overview

8

Static

static

tmp.exe

windows7-x64

8

tmp.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    15.8MB

  • Sample

    220919-f6mhdaabe8

  • MD5

    fbfdd2b96a36a57386d32a561e92242e

  • SHA1

    c2cefade6308406c9473c323912054a825ffa659

  • SHA256

    45169d3cd5ba4c7e5bd6135bbf13a5ee8135cdaa5eb503e9074655f482443057

  • SHA512

    8bcc947790905895c531a6d192593bba36df1c20d032f9d95c04c525a576725737a995ed9f092ef82d88936a10e771c066b75505b9174322104db4451df71ecb

  • SSDEEP

    393216:D1BTI5SwOS3ym/BCHhRkXBXxTR472a9py7GkiGDa/8A:giGDa/8A

Score
8/10
persistence

Malware Config

Targets

    • Target

      tmp

    • Size

      15.8MB

    • MD5

      fbfdd2b96a36a57386d32a561e92242e

    • SHA1

      c2cefade6308406c9473c323912054a825ffa659

    • SHA256

      45169d3cd5ba4c7e5bd6135bbf13a5ee8135cdaa5eb503e9074655f482443057

    • SHA512

      8bcc947790905895c531a6d192593bba36df1c20d032f9d95c04c525a576725737a995ed9f092ef82d88936a10e771c066b75505b9174322104db4451df71ecb

    • SSDEEP

      393216:D1BTI5SwOS3ym/BCHhRkXBXxTR472a9py7GkiGDa/8A:giGDa/8A

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks