Overview

overview

8

Static

static

2a2515a48f...15.exe

windows7-x64

8

2a2515a48f...15.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    2a2515a48f90c1a04fe8e00d6cefc16b9f0e451273a39b3533608ac3cc65eb15

  • Size

    73KB

  • Sample

    221018-3bgd7seag8

  • MD5

    a3bf33078cca17926f9998eed4900359

  • SHA1

    7c12afc21a260d2b35517a53c4dfa8af40f1722d

  • SHA256

    2a2515a48f90c1a04fe8e00d6cefc16b9f0e451273a39b3533608ac3cc65eb15

  • SHA512

    5a9fdd5f788aa2fdf6a9e074546c2f56811c1e8b8c845f1c351237aaeac7df185ad2cf8f0a4e5dc120a5ebb41df5763b7a80e9051e4858d47c99905a2e16e878

  • SSDEEP

    768:6DcZyUpULCgodf0T1PrGz96ByXbQtlYn+289WZve73uJKxxxS:6Dc/pULCHdf0T16zyyXMtH289WZveKT

Score
8/10
evasion

Malware Config

Targets

    • Target

      2a2515a48f90c1a04fe8e00d6cefc16b9f0e451273a39b3533608ac3cc65eb15

    • Size

      73KB

    • MD5

      a3bf33078cca17926f9998eed4900359

    • SHA1

      7c12afc21a260d2b35517a53c4dfa8af40f1722d

    • SHA256

      2a2515a48f90c1a04fe8e00d6cefc16b9f0e451273a39b3533608ac3cc65eb15

    • SHA512

      5a9fdd5f788aa2fdf6a9e074546c2f56811c1e8b8c845f1c351237aaeac7df185ad2cf8f0a4e5dc120a5ebb41df5763b7a80e9051e4858d47c99905a2e16e878

    • SSDEEP

      768:6DcZyUpULCgodf0T1PrGz96ByXbQtlYn+289WZve73uJKxxxS:6Dc/pULCHdf0T16zyyXMtH289WZveKT

    Score
    8/10
    evasion

    • Executes dropped EXE

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks