Overview

overview

8

Static

static

file.exe

windows7-x64

8

file.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    file.exe

  • Size

    7.3MB

  • Sample

    221002-grg5sabca9

  • MD5

    ad0533f9d5705f8b92499323a6837f7c

  • SHA1

    e309ba24a226991e6764bfe50d6cf964d462eb62

  • SHA256

    b4a85dcc67119ffdfa0e4c03fbe60d437aee99cf33e4d9dc2badb64d5309bd5f

  • SHA512

    9c3e243c09178535e2778de63a797bf77cf4eb6d0453e841d984967c54606e2f12c16a4bff96f4d3aafd66860349c8e8b830e55630e5e4c6c1730f4bbe1f8bd8

  • SSDEEP

    196608:91OXVFhpceDYeoITVpd9EieXs24XrfPO/NtIVla7aE4RV:3OFrJaOpdKieXsj7f2Pwa8

Score
8/10

Malware Config

Targets

    • Target

      file.exe

    • Size

      7.3MB

    • MD5

      ad0533f9d5705f8b92499323a6837f7c

    • SHA1

      e309ba24a226991e6764bfe50d6cf964d462eb62

    • SHA256

      b4a85dcc67119ffdfa0e4c03fbe60d437aee99cf33e4d9dc2badb64d5309bd5f

    • SHA512

      9c3e243c09178535e2778de63a797bf77cf4eb6d0453e841d984967c54606e2f12c16a4bff96f4d3aafd66860349c8e8b830e55630e5e4c6c1730f4bbe1f8bd8

    • SSDEEP

      196608:91OXVFhpceDYeoITVpd9EieXs24XrfPO/NtIVla7aE4RV:3OFrJaOpdKieXsj7f2Pwa8

    Score
    8/10

    • Executes dropped EXE

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks