Overview

overview

8

Static

static

1

eb003ed82d...8a.exe

windows7-x64

8

eb003ed82d...8a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eb003ed82d5ba03b0cedadbf2a977aba36f84ff603cda54b303941274657e28a

  • Size

    1.5MB

  • Sample

    220919-t7e2kshaa8

  • MD5

    af5f99438f5b0c672275eba2b343ae0f

  • SHA1

    51845c686a8373307e770f695f1dfb719136ee25

  • SHA256

    eb003ed82d5ba03b0cedadbf2a977aba36f84ff603cda54b303941274657e28a

  • SHA512

    11fb8b0473540258f8576055160086b49ad0e69e6f3fb3907ec008bc3a9bbde340885a090eda5b85e9677dd0038e705398cbc6ef03e4f20e55a8ec63aef91dc6

  • SSDEEP

    24576:957AEptiTS9bFEESnEM/iJZMT8v7pNKuQKiOuK2rpfnG0AU0EjOhC0TGbQU9YwIB:P79pSnB/igTYN3efKMG0rrORTcQdB0p+

Score
8/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      eb003ed82d5ba03b0cedadbf2a977aba36f84ff603cda54b303941274657e28a

    • Size

      1.5MB

    • MD5

      af5f99438f5b0c672275eba2b343ae0f

    • SHA1

      51845c686a8373307e770f695f1dfb719136ee25

    • SHA256

      eb003ed82d5ba03b0cedadbf2a977aba36f84ff603cda54b303941274657e28a

    • SHA512

      11fb8b0473540258f8576055160086b49ad0e69e6f3fb3907ec008bc3a9bbde340885a090eda5b85e9677dd0038e705398cbc6ef03e4f20e55a8ec63aef91dc6

    • SSDEEP

      24576:957AEptiTS9bFEESnEM/iJZMT8v7pNKuQKiOuK2rpfnG0AU0EjOhC0TGbQU9YwIB:P79pSnB/igTYN3efKMG0rrORTcQdB0p+

    Score
    8/10
    discoverypersistenceevasiontrojan

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Registers COM server for autorun

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks