Overview

overview

8

Static

static

ef795fe57c...ef.exe

windows7-x64

8

ef795fe57c...ef.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    ef795fe57c9522495b6faf8dec64bb52c9139a36c63dd79f3365b931f7e4c2ef

  • Size

    584KB

  • Sample

    221003-pcjdasehf3

  • MD5

    67c1ecc7a57ed91c4b39edf2b53b34f0

  • SHA1

    f4379c40c9c7fc6a3f36a794e59c8ab4166fe78f

  • SHA256

    ef795fe57c9522495b6faf8dec64bb52c9139a36c63dd79f3365b931f7e4c2ef

  • SHA512

    f06f204c87768fe7b263cac6137675f09b26ba033f0621e3209dc9ee102280030aba118106e8ec8d23e96b32cbef929c71769a27772057be146b5149bf36509b

  • SSDEEP

    12288:FHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:FDgINfAuBcgcZG2uG24MG4Y

Score
8/10

Malware Config

Targets

    • Target

      ef795fe57c9522495b6faf8dec64bb52c9139a36c63dd79f3365b931f7e4c2ef

    • Size

      584KB

    • MD5

      67c1ecc7a57ed91c4b39edf2b53b34f0

    • SHA1

      f4379c40c9c7fc6a3f36a794e59c8ab4166fe78f

    • SHA256

      ef795fe57c9522495b6faf8dec64bb52c9139a36c63dd79f3365b931f7e4c2ef

    • SHA512

      f06f204c87768fe7b263cac6137675f09b26ba033f0621e3209dc9ee102280030aba118106e8ec8d23e96b32cbef929c71769a27772057be146b5149bf36509b

    • SSDEEP

      12288:FHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:FDgINfAuBcgcZG2uG24MG4Y

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks