Overview

overview

8

Static

static

970a3a6cf3...f0.exe

windows7-x64

1

970a3a6cf3...f0.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    970a3a6cf3767aace209f7fb7325aa2feef6dcac175ec33809c825e69bb426f0

  • Size

    76KB

  • Sample

    221029-anp8nadghm

  • MD5

    74b3e5418f9398de44d33406c7d46b79

  • SHA1

    20467ef269647131d0a320bba07b15226b7ef9ee

  • SHA256

    970a3a6cf3767aace209f7fb7325aa2feef6dcac175ec33809c825e69bb426f0

  • SHA512

    bec4c4322c23c29f4f3ad45f4d22f52b251ac0a1b828ad172ef5375fef0cae42c8cbc36de0b7b812dad73ccb43fe291740407bb21c3f506b2d1f5fc9e95a5398

  • SSDEEP

    768:uGJjLBjHVrfzGl0qgj0zkSzzWmrygdiafsmyGnshJCfqZeFnnnb0ACtsTLdD+e/L:LjLBJE0ZAlvrLsmQT9Ob0Y1+4hXz

Score
8/10
persistence

Malware Config

Targets

    • Target

      970a3a6cf3767aace209f7fb7325aa2feef6dcac175ec33809c825e69bb426f0

    • Size

      76KB

    • MD5

      74b3e5418f9398de44d33406c7d46b79

    • SHA1

      20467ef269647131d0a320bba07b15226b7ef9ee

    • SHA256

      970a3a6cf3767aace209f7fb7325aa2feef6dcac175ec33809c825e69bb426f0

    • SHA512

      bec4c4322c23c29f4f3ad45f4d22f52b251ac0a1b828ad172ef5375fef0cae42c8cbc36de0b7b812dad73ccb43fe291740407bb21c3f506b2d1f5fc9e95a5398

    • SSDEEP

      768:uGJjLBjHVrfzGl0qgj0zkSzzWmrygdiafsmyGnshJCfqZeFnnnb0ACtsTLdD+e/L:LjLBJE0ZAlvrLsmQT9Ob0Y1+4hXz

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks