Overview

overview

8

Static

static

83a224d02c...76.exe

windows7-x64

8

83a224d02c...76.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    83a224d02c0e0121370b6591156483a398175cac441b6780072252bd39833376

  • Size

    77KB

  • Sample

    220919-rfgd8agadl

  • MD5

    77ff7cd16cb5d359d402874a98de9b4d

  • SHA1

    e7ce06beb6f62a2410edef6f6586a676fb6303f3

  • SHA256

    83a224d02c0e0121370b6591156483a398175cac441b6780072252bd39833376

  • SHA512

    8b5628738ae4f690bcd64f6c0b292f65a710d101349cb8772a1224af8a80a7b746d29ebe6d4227ac2ff9c195a6150c1b50db6ef5d129d9e0b1f1fd2eb571f308

  • SSDEEP

    1536:mw4zKFY6bW9RX4jIRblotNxSXxRMrUOCA1BF02k+GP7xzeyhAOulU:mw4zKFY6qXuIRcNgwLzF1k1P7xzeVOum

Score
8/10
persistence

Malware Config

Targets

    • Target

      83a224d02c0e0121370b6591156483a398175cac441b6780072252bd39833376

    • Size

      77KB

    • MD5

      77ff7cd16cb5d359d402874a98de9b4d

    • SHA1

      e7ce06beb6f62a2410edef6f6586a676fb6303f3

    • SHA256

      83a224d02c0e0121370b6591156483a398175cac441b6780072252bd39833376

    • SHA512

      8b5628738ae4f690bcd64f6c0b292f65a710d101349cb8772a1224af8a80a7b746d29ebe6d4227ac2ff9c195a6150c1b50db6ef5d129d9e0b1f1fd2eb571f308

    • SSDEEP

      1536:mw4zKFY6bW9RX4jIRblotNxSXxRMrUOCA1BF02k+GP7xzeyhAOulU:mw4zKFY6qXuIRcNgwLzF1k1P7xzeVOum

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks