Overview

overview

8

Static

static

db9305960c...cf.exe

windows7-x64

8

db9305960c...cf.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    db9305960c6c139b2311ab9339c2dee51773dc4f51aeb4bd5de76b6344292fcf

  • Size

    237KB

  • Sample

    221021-bgkj9sebg3

  • MD5

    79ab763baf4f85ddc8b87d47f3117ec0

  • SHA1

    f311effc11ade55f64d2b044c6080fb0d9c52b1c

  • SHA256

    db9305960c6c139b2311ab9339c2dee51773dc4f51aeb4bd5de76b6344292fcf

  • SHA512

    fc94d88b60975ab11d69d5cae7cc0f947a6bfe8aec3838c80ad0945efc6483a58e93ec6dfc81da5df93cad0a43770f3fdbbf81b2a274f551ae5ae6ee06871780

  • SSDEEP

    3072:ZBAp5XhKpN4eOyVTGfhEClj8jTk+0hT6IPEaG562E3nV9uVSUO2u+Cgw5CKHq:cbXE9OiTGfhEClq9gTuPJJUq

Score
8/10
discovery

Malware Config

Targets

    • Target

      db9305960c6c139b2311ab9339c2dee51773dc4f51aeb4bd5de76b6344292fcf

    • Size

      237KB

    • MD5

      79ab763baf4f85ddc8b87d47f3117ec0

    • SHA1

      f311effc11ade55f64d2b044c6080fb0d9c52b1c

    • SHA256

      db9305960c6c139b2311ab9339c2dee51773dc4f51aeb4bd5de76b6344292fcf

    • SHA512

      fc94d88b60975ab11d69d5cae7cc0f947a6bfe8aec3838c80ad0945efc6483a58e93ec6dfc81da5df93cad0a43770f3fdbbf81b2a274f551ae5ae6ee06871780

    • SSDEEP

      3072:ZBAp5XhKpN4eOyVTGfhEClj8jTk+0hT6IPEaG562E3nV9uVSUO2u+Cgw5CKHq:cbXE9OiTGfhEClq9gTuPJJUq

    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks