Overview

overview

8

Static

static

111ccfa2c3...1c.exe

windows7-x64

8

111ccfa2c3...1c.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    111ccfa2c355f5d866247d363a0486ed8a2f4fcc5026eaf803e94d5ffdd1e81c

  • Size

    1.7MB

  • Sample

    221018-e4wslaegak

  • MD5

    0eb95c22607e7ff7ac2ec406c63b7e00

  • SHA1

    7ad198f32f403e667366c1e3273c613603f9349a

  • SHA256

    111ccfa2c355f5d866247d363a0486ed8a2f4fcc5026eaf803e94d5ffdd1e81c

  • SHA512

    e5ae1ebafb5f2e4aed47a1861bf88a0cf70d431570f3ca10f9222e6cadaa39a77d5068252e285d7e344b6b76cc7aeb18fe4a2d5eae53fe30242ef84886ab9231

  • SSDEEP

    49152:mS1YTuq9qE0S/IfLYmjfAko2Lj6kxs0rdhTlG:JIq0cZfAko23PI

Score
8/10
persistence

Malware Config

Targets

    • Target

      111ccfa2c355f5d866247d363a0486ed8a2f4fcc5026eaf803e94d5ffdd1e81c

    • Size

      1.7MB

    • MD5

      0eb95c22607e7ff7ac2ec406c63b7e00

    • SHA1

      7ad198f32f403e667366c1e3273c613603f9349a

    • SHA256

      111ccfa2c355f5d866247d363a0486ed8a2f4fcc5026eaf803e94d5ffdd1e81c

    • SHA512

      e5ae1ebafb5f2e4aed47a1861bf88a0cf70d431570f3ca10f9222e6cadaa39a77d5068252e285d7e344b6b76cc7aeb18fe4a2d5eae53fe30242ef84886ab9231

    • SSDEEP

      49152:mS1YTuq9qE0S/IfLYmjfAko2Lj6kxs0rdhTlG:JIq0cZfAko23PI

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks