Overview

overview

10

Static

static

167f7172fa...4d.exe

windows7-x64

10

167f7172fa...4d.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    167f7172facd9e494e3404c1ec307db0d7d6053005e5428d51bec1b33777144d

  • Size

    24KB

  • Sample

    221003-ssmmfacgel

  • MD5

    65d71dedd2cea264c151c442325a17c0

  • SHA1

    a0984eb5d30ba6d28ee7c7ba547015eac208aea1

  • SHA256

    167f7172facd9e494e3404c1ec307db0d7d6053005e5428d51bec1b33777144d

  • SHA512

    67d3a1af4f563feeb904d63d5cbac609b89a70d0dd0f42f293d3d2ff6c55cbf9bdb27472c929ed0966c33076d287f995b6cf8d277eea67be631a96cb8c343ef1

  • SSDEEP

    384:/zqc/RK97lGre2vD6eVjlJ4spvT1ZKNpltxDlJnELKt8Cy/jhGl9+:bqco9Are2fjlJ4sJEPxoU8Cy/jh4Q

Score
10/10
persistence

Malware Config

Targets

    • Target

      167f7172facd9e494e3404c1ec307db0d7d6053005e5428d51bec1b33777144d

    • Size

      24KB

    • MD5

      65d71dedd2cea264c151c442325a17c0

    • SHA1

      a0984eb5d30ba6d28ee7c7ba547015eac208aea1

    • SHA256

      167f7172facd9e494e3404c1ec307db0d7d6053005e5428d51bec1b33777144d

    • SHA512

      67d3a1af4f563feeb904d63d5cbac609b89a70d0dd0f42f293d3d2ff6c55cbf9bdb27472c929ed0966c33076d287f995b6cf8d277eea67be631a96cb8c343ef1

    • SSDEEP

      384:/zqc/RK97lGre2vD6eVjlJ4spvT1ZKNpltxDlJnELKt8Cy/jhGl9+:bqco9Are2fjlJ4sJEPxoU8Cy/jh4Q

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks