Overview

overview

8

Static

static

1cf515f370...6a.exe

windows7-x64

8

1cf515f370...6a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1cf515f3703846fc5f83ab053ab501e126fc4171d57cff4f53d7b8e489fb5d6a

  • Size

    122KB

  • Sample

    221002-rd4fzahhf2

  • MD5

    53ebe3efa9bdad1a2af74252ccf19bd2

  • SHA1

    74e3bea45a504edd34ac009c5abcc56f477617b9

  • SHA256

    1cf515f3703846fc5f83ab053ab501e126fc4171d57cff4f53d7b8e489fb5d6a

  • SHA512

    6f8ff09930a0f8502c93ce4cfc2f92d526e7aa348848e5df23e021aa419cea06dbc3ddcf6cceae92c8f14416cda3a43bf3b82e539ef2f57637e160e60c51455b

  • SSDEEP

    3072:TAY9SuJNW8CZ+zTyxvJ530A3RAVavmyKoSiZBtJ:TPX69ZMyxx5kA3RAVauZoSiZ7

Score
8/10

Malware Config

Targets

    • Target

      1cf515f3703846fc5f83ab053ab501e126fc4171d57cff4f53d7b8e489fb5d6a

    • Size

      122KB

    • MD5

      53ebe3efa9bdad1a2af74252ccf19bd2

    • SHA1

      74e3bea45a504edd34ac009c5abcc56f477617b9

    • SHA256

      1cf515f3703846fc5f83ab053ab501e126fc4171d57cff4f53d7b8e489fb5d6a

    • SHA512

      6f8ff09930a0f8502c93ce4cfc2f92d526e7aa348848e5df23e021aa419cea06dbc3ddcf6cceae92c8f14416cda3a43bf3b82e539ef2f57637e160e60c51455b

    • SSDEEP

      3072:TAY9SuJNW8CZ+zTyxvJ530A3RAVavmyKoSiZBtJ:TPX69ZMyxx5kA3RAVauZoSiZ7

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks