Overview

overview

8

Static

static

1

559a4a537f...f3.exe

windows7-x64

8

559a4a537f...f3.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    559a4a537fbcf3facc9660a9023989262e93b7179d5ddb632f9194b01e7ba2f3

  • Size

    349KB

  • Sample

    221020-r89w8sabgp

  • MD5

    904a4fa9d49ef0c14b477ed6aa916f2e

  • SHA1

    2c5cd08f948acc70d10b9c894d86fc4473cf633d

  • SHA256

    559a4a537fbcf3facc9660a9023989262e93b7179d5ddb632f9194b01e7ba2f3

  • SHA512

    97bea521a627f275bf66b277d68d491548a81f5bc3f0571f9eb0679b3849ffb16fae306c4224b8aa97caa00101911b146633ee19ac6d9e711ab931aa0c811bb0

  • SSDEEP

    6144:ye34Znu/EJXAF8u1qBhGNy4909VezjiGF+nh9CUZLcb+F3:REJXs1q2N1906jidGUZLcb+F3

Score
8/10

Malware Config

Targets

    • Target

      559a4a537fbcf3facc9660a9023989262e93b7179d5ddb632f9194b01e7ba2f3

    • Size

      349KB

    • MD5

      904a4fa9d49ef0c14b477ed6aa916f2e

    • SHA1

      2c5cd08f948acc70d10b9c894d86fc4473cf633d

    • SHA256

      559a4a537fbcf3facc9660a9023989262e93b7179d5ddb632f9194b01e7ba2f3

    • SHA512

      97bea521a627f275bf66b277d68d491548a81f5bc3f0571f9eb0679b3849ffb16fae306c4224b8aa97caa00101911b146633ee19ac6d9e711ab931aa0c811bb0

    • SSDEEP

      6144:ye34Znu/EJXAF8u1qBhGNy4909VezjiGF+nh9CUZLcb+F3:REJXs1q2N1906jidGUZLcb+F3

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks