Overview

overview

8

Static

static

c0b1533f0b...7b.exe

windows7-x64

8

c0b1533f0b...7b.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c0b1533f0ba3fd5dd5b7ddf63c61bd090dbd9cd3f9654b994a65b360d3781e7b

  • Size

    185KB

  • Sample

    221002-x9xaesfgg5

  • MD5

    723ee30aaf9142c03fd9a6e83b6c0220

  • SHA1

    ae70b4bb8c555b263fa037a19661523c105cd2e4

  • SHA256

    c0b1533f0ba3fd5dd5b7ddf63c61bd090dbd9cd3f9654b994a65b360d3781e7b

  • SHA512

    156fa60452b4e264c3cb717870e216aeb37df96c1a44ac88b4f9dce9d9954ec4a679baa7e06475a54388df8ea2dfff18538b70b88818e4f64ff6794d8a8b771f

  • SSDEEP

    3072:CBI5ArKGCnhgU1XA+ArXjeaMoh6lgUaVwQ+/76bSSN+PS7VyoCeJ6ik+0b0UCCV:CK5ArKjbAxXSaegUqGeGpBohMp

Score
8/10
persistence

Malware Config

Targets

    • Target

      c0b1533f0ba3fd5dd5b7ddf63c61bd090dbd9cd3f9654b994a65b360d3781e7b

    • Size

      185KB

    • MD5

      723ee30aaf9142c03fd9a6e83b6c0220

    • SHA1

      ae70b4bb8c555b263fa037a19661523c105cd2e4

    • SHA256

      c0b1533f0ba3fd5dd5b7ddf63c61bd090dbd9cd3f9654b994a65b360d3781e7b

    • SHA512

      156fa60452b4e264c3cb717870e216aeb37df96c1a44ac88b4f9dce9d9954ec4a679baa7e06475a54388df8ea2dfff18538b70b88818e4f64ff6794d8a8b771f

    • SSDEEP

      3072:CBI5ArKGCnhgU1XA+ArXjeaMoh6lgUaVwQ+/76bSSN+PS7VyoCeJ6ik+0b0UCCV:CK5ArKjbAxXSaegUqGeGpBohMp

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks