Overview

overview

7

Static

static

tmp.exe

windows7-x64

3

tmp.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    1.7MB

  • Sample

    220923-hkhneahdal

  • MD5

    32872588c27ca8605d978cbee2a5b015

  • SHA1

    745bd83e1ebed8917db8db327d7df0dae47c1c0d

  • SHA256

    93e0780f767832e16b70626a623384f69022fdc7cd8b4046bad18a5d58e24ff4

  • SHA512

    81cfcea80276ffd58a1ca035a719960b42c70901211625ea8b9f5d109815dc8bfc85b6b5f4e01d75efed3a410d289212c18e28b0850cf4eb72e3317d5d5e3753

  • SSDEEP

    49152:0AgP22Qgnp1/kgChYku1rZeDsP4KiIxXxQ:0dP2W1/kaPnxQ

Score
7/10

Malware Config

Targets

    • Target

      tmp

    • Size

      1.7MB

    • MD5

      32872588c27ca8605d978cbee2a5b015

    • SHA1

      745bd83e1ebed8917db8db327d7df0dae47c1c0d

    • SHA256

      93e0780f767832e16b70626a623384f69022fdc7cd8b4046bad18a5d58e24ff4

    • SHA512

      81cfcea80276ffd58a1ca035a719960b42c70901211625ea8b9f5d109815dc8bfc85b6b5f4e01d75efed3a410d289212c18e28b0850cf4eb72e3317d5d5e3753

    • SSDEEP

      49152:0AgP22Qgnp1/kgChYku1rZeDsP4KiIxXxQ:0dP2W1/kaPnxQ

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks