Overview

overview

8

Static

static

4ad6c08d94...e9.exe

windows7-x64

8

4ad6c08d94...e9.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    4ad6c08d9413ccafcd29fd13e9d944e8bf5e4ac6ed4aa57df465535182984be9

  • Size

    505KB

  • Sample

    220924-mwywzsbbd2

  • MD5

    f254b753aa128c249c1b6e8845f7a0e6

  • SHA1

    7575e9e82d10440ad2241e0fe4909945e663103d

  • SHA256

    4ad6c08d9413ccafcd29fd13e9d944e8bf5e4ac6ed4aa57df465535182984be9

  • SHA512

    ce9bbb58171ea3cbe2ba5aaf6f17f1a336e41b241758f5380c6ed81dd4dffbb2ce593e00e2ef4471eb36cfa591beccb9320cbb81f438f45f8432b4e859a87721

  • SSDEEP

    6144:jO8Wqeb0ogzJ4iXhr2sjuX90lQrjwcjy4CS1MajAC7hZfmkQppTyzNTyzi:jO8Wqeb0og94iXhr2uuNS4Dmyzhyzi

Score
8/10

Malware Config

Targets

    • Target

      4ad6c08d9413ccafcd29fd13e9d944e8bf5e4ac6ed4aa57df465535182984be9

    • Size

      505KB

    • MD5

      f254b753aa128c249c1b6e8845f7a0e6

    • SHA1

      7575e9e82d10440ad2241e0fe4909945e663103d

    • SHA256

      4ad6c08d9413ccafcd29fd13e9d944e8bf5e4ac6ed4aa57df465535182984be9

    • SHA512

      ce9bbb58171ea3cbe2ba5aaf6f17f1a336e41b241758f5380c6ed81dd4dffbb2ce593e00e2ef4471eb36cfa591beccb9320cbb81f438f45f8432b4e859a87721

    • SSDEEP

      6144:jO8Wqeb0ogzJ4iXhr2sjuX90lQrjwcjy4CS1MajAC7hZfmkQppTyzNTyzi:jO8Wqeb0og94iXhr2uuNS4Dmyzhyzi

    Score
    8/10

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks