Overview

overview

10

Static

static

99c89b7539...36.exe

windows7-x64

10

99c89b7539...36.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    99c89b7539f253d895631e0f4371a29e0aed7a66b0bc6a0bbdbbfcd60dda7136

  • Size

    950KB

  • Sample

    221002-y7ne6shdh7

  • MD5

    66d7ba529e622874ade904cd081c0166

  • SHA1

    2ff4dda80a4e4aa9390097f689c0e0bcce1c2b76

  • SHA256

    99c89b7539f253d895631e0f4371a29e0aed7a66b0bc6a0bbdbbfcd60dda7136

  • SHA512

    280df746e26e3aab513364385fdafc4cfed861d2aee56fac9e78bd707d65f4873afc7e6ecae1fee589dd7fb1c372d1db8e7839ddd85fed14fefda10591cf1714

  • SSDEEP

    6144:a+nglw9ayQv3ahvyn/PU7O0KXgTTSj9ltfgIg+oa+ZEN2ERBOzi0q5Lm17z6qRBT:rjS3Yvyn/0TkLF+I0q5Lvqsgvzqa

Score
10/10
persistence

Malware Config

Targets

    • Target

      99c89b7539f253d895631e0f4371a29e0aed7a66b0bc6a0bbdbbfcd60dda7136

    • Size

      950KB

    • MD5

      66d7ba529e622874ade904cd081c0166

    • SHA1

      2ff4dda80a4e4aa9390097f689c0e0bcce1c2b76

    • SHA256

      99c89b7539f253d895631e0f4371a29e0aed7a66b0bc6a0bbdbbfcd60dda7136

    • SHA512

      280df746e26e3aab513364385fdafc4cfed861d2aee56fac9e78bd707d65f4873afc7e6ecae1fee589dd7fb1c372d1db8e7839ddd85fed14fefda10591cf1714

    • SSDEEP

      6144:a+nglw9ayQv3ahvyn/PU7O0KXgTTSj9ltfgIg+oa+ZEN2ERBOzi0q5Lm17z6qRBT:rjS3Yvyn/0TkLF+I0q5Lvqsgvzqa

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks