Overview

overview

8

Static

static

c35560150d...01.exe

windows7-x64

7

c35560150d...01.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c35560150d0ab1cc58bf8322d0ae4c01.exe

  • Size

    6.1MB

  • Sample

    221027-wvydhadab2

  • MD5

    c35560150d0ab1cc58bf8322d0ae4c01

  • SHA1

    3f12923041577250bb53f403aa2bb99bddb7f8d5

  • SHA256

    fb1bd527586e3a82d89891d4dc6b925ec1d9ba75110bef638ff852bc14e0496f

  • SHA512

    8963b63e9d77267c63c5b326d236854586abe0797cc324367567e66f74b0e6fb93c7e7e2a8e2e15da44c7bcabd6e384a65be4a4d3e0f3c2b43b2fa705a94450b

  • SSDEEP

    98304:/KTMxu2J7nsKRvR1367Q3K+miKpIFF1kS8pkj8LC/vlnjWhUVmOjrjuaX2co6:CMCKRX3X3pm5poFez0jWhGxr9Gco

Score
8/10

Malware Config

Targets

    • Target

      c35560150d0ab1cc58bf8322d0ae4c01.exe

    • Size

      6.1MB

    • MD5

      c35560150d0ab1cc58bf8322d0ae4c01

    • SHA1

      3f12923041577250bb53f403aa2bb99bddb7f8d5

    • SHA256

      fb1bd527586e3a82d89891d4dc6b925ec1d9ba75110bef638ff852bc14e0496f

    • SHA512

      8963b63e9d77267c63c5b326d236854586abe0797cc324367567e66f74b0e6fb93c7e7e2a8e2e15da44c7bcabd6e384a65be4a4d3e0f3c2b43b2fa705a94450b

    • SSDEEP

      98304:/KTMxu2J7nsKRvR1367Q3K+miKpIFF1kS8pkj8LC/vlnjWhUVmOjrjuaX2co6:CMCKRX3X3pm5poFez0jWhGxr9Gco

    Score
    8/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks