Overview

overview

8

Static

static

c6c85fd6a2...98.exe

windows7-x64

8

c6c85fd6a2...98.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    c6c85fd6a2577d9ca57ffa4e5e0f1c1e5b81a99736b21a35acd5e5a6f2d8bd98

  • Size

    16KB

  • Sample

    220919-kzrwqsdfcq

  • MD5

    779288602e9acd07d2516660fc233c33

  • SHA1

    58b0d51b1d4cceecbb90d18b2e9abf22fa3f24e3

  • SHA256

    c6c85fd6a2577d9ca57ffa4e5e0f1c1e5b81a99736b21a35acd5e5a6f2d8bd98

  • SHA512

    7f5864629b0a3d641f824948710798d73a56cbfdfe191cb5ab5d1c320f51d4667666026531917806991ea590a9138cb333a0fc5f923a226959a601e3be558492

  • SSDEEP

    384:JnZXIxyEm8GUrJQlBVbVt3Q1EsoN8aJZLB:xZXIxRm8GoJgBtVt3QOtr

Score
8/10
persistence

Malware Config

Targets

    • Target

      c6c85fd6a2577d9ca57ffa4e5e0f1c1e5b81a99736b21a35acd5e5a6f2d8bd98

    • Size

      16KB

    • MD5

      779288602e9acd07d2516660fc233c33

    • SHA1

      58b0d51b1d4cceecbb90d18b2e9abf22fa3f24e3

    • SHA256

      c6c85fd6a2577d9ca57ffa4e5e0f1c1e5b81a99736b21a35acd5e5a6f2d8bd98

    • SHA512

      7f5864629b0a3d641f824948710798d73a56cbfdfe191cb5ab5d1c320f51d4667666026531917806991ea590a9138cb333a0fc5f923a226959a601e3be558492

    • SSDEEP

      384:JnZXIxyEm8GUrJQlBVbVt3Q1EsoN8aJZLB:xZXIxRm8GoJgBtVt3QOtr

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks