Overview

overview

8

Static

static

1d0b1c4795...0c.exe

windows7-x64

8

1d0b1c4795...0c.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    1d0b1c4795086771d006b97fec4c87554718df21e3d11213819a56a11468590c

  • Size

    479KB

  • Sample

    221002-hmm1xacfe4

  • MD5

    5b958cd60cf3bdc7962f19d1eb1086a0

  • SHA1

    f760c8d88b26e505c293eb99e311e170d2679851

  • SHA256

    1d0b1c4795086771d006b97fec4c87554718df21e3d11213819a56a11468590c

  • SHA512

    6bbb652e78ba5359cf15dd8162e36ba2be7a3a0ea434e24730a90301622f46c1a735dd631c94d590c024750b0ee38e01832bb7501b6ac116c2ac15c1051dbad9

  • SSDEEP

    12288:N/AYUKZyq7sg+r6f3oR3Sx6eLBdNfNvixUCa:/nLwge6fK3SxVdNfpieCa

Score
8/10

Malware Config

Targets

    • Target

      1d0b1c4795086771d006b97fec4c87554718df21e3d11213819a56a11468590c

    • Size

      479KB

    • MD5

      5b958cd60cf3bdc7962f19d1eb1086a0

    • SHA1

      f760c8d88b26e505c293eb99e311e170d2679851

    • SHA256

      1d0b1c4795086771d006b97fec4c87554718df21e3d11213819a56a11468590c

    • SHA512

      6bbb652e78ba5359cf15dd8162e36ba2be7a3a0ea434e24730a90301622f46c1a735dd631c94d590c024750b0ee38e01832bb7501b6ac116c2ac15c1051dbad9

    • SSDEEP

      12288:N/AYUKZyq7sg+r6f3oR3Sx6eLBdNfNvixUCa:/nLwge6fK3SxVdNfpieCa

    Score
    8/10

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks