Overview

overview

8

Static

static

17d1dd6698...9c.exe

windows7-x64

8

17d1dd6698...9c.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17d1dd66980e93ea4b0225e24fbb5b8affe808fdd6b4e24c651d655377c63a9c

  • Size

    20KB

  • Sample

    221011-r6vdrsadf9

  • MD5

    5ae356c0e6e632a3204815ea11af4370

  • SHA1

    799c875f919e59248737c97ed92c1504660ae96c

  • SHA256

    17d1dd66980e93ea4b0225e24fbb5b8affe808fdd6b4e24c651d655377c63a9c

  • SHA512

    af4a8f66db6cd453dc72290921ca99cc26f87877b38225eb68d86c4a0cc7b5df7e271e18b4005d753a1a6dba9201fab041a3d8c543eb8f23ecc1568ab2b68edf

  • SSDEEP

    192:1l5E3krTuntKy0peHDfCpHfBv+I4QwXt9V+jqu0G5KDJBFBG:1M3PnQoHDCpHf4I4Qwdc0G5KDJY

Score
8/10

Malware Config

Targets

    • Target

      17d1dd66980e93ea4b0225e24fbb5b8affe808fdd6b4e24c651d655377c63a9c

    • Size

      20KB

    • MD5

      5ae356c0e6e632a3204815ea11af4370

    • SHA1

      799c875f919e59248737c97ed92c1504660ae96c

    • SHA256

      17d1dd66980e93ea4b0225e24fbb5b8affe808fdd6b4e24c651d655377c63a9c

    • SHA512

      af4a8f66db6cd453dc72290921ca99cc26f87877b38225eb68d86c4a0cc7b5df7e271e18b4005d753a1a6dba9201fab041a3d8c543eb8f23ecc1568ab2b68edf

    • SSDEEP

      192:1l5E3krTuntKy0peHDfCpHfBv+I4QwXt9V+jqu0G5KDJBFBG:1M3PnQoHDCpHf4I4Qwdc0G5KDJY

    Score
    8/10

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks