Overview

overview

8

Static

static

2bcca34ec3...41.exe

windows7-x64

8

2bcca34ec3...41.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2bcca34ec3c6a9905f15251d157e03605b0a5b72052df90a39f0efc69f3d6341

  • Size

    754KB

  • Sample

    221018-j2z5fsfaf8

  • MD5

    575b60066fb4a2820d8f87ab6c602096

  • SHA1

    21ea5e7cd28c80cca2c80d957509eba484206189

  • SHA256

    2bcca34ec3c6a9905f15251d157e03605b0a5b72052df90a39f0efc69f3d6341

  • SHA512

    b954d42741dd2b8d45f95f6e751b9aa3c15bbb19a691ee86aa9b035de783c688cf0dace4055eab57cef671e89b0fcc1bb6838d7ffd389538561fe676eddc9e28

  • SSDEEP

    12288:KMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9tC3:KnsJ39LyjbJkQFMhmC+6GD9g

Score
8/10
persistence

Malware Config

Targets

    • Target

      2bcca34ec3c6a9905f15251d157e03605b0a5b72052df90a39f0efc69f3d6341

    • Size

      754KB

    • MD5

      575b60066fb4a2820d8f87ab6c602096

    • SHA1

      21ea5e7cd28c80cca2c80d957509eba484206189

    • SHA256

      2bcca34ec3c6a9905f15251d157e03605b0a5b72052df90a39f0efc69f3d6341

    • SHA512

      b954d42741dd2b8d45f95f6e751b9aa3c15bbb19a691ee86aa9b035de783c688cf0dace4055eab57cef671e89b0fcc1bb6838d7ffd389538561fe676eddc9e28

    • SSDEEP

      12288:KMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9tC3:KnsJ39LyjbJkQFMhmC+6GD9g

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks