Overview

overview

8

Static

static

57bc6fce2b...52.exe

windows7-x64

8

57bc6fce2b...52.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    57bc6fce2b9062b35db2f64da1851490ac713eeed098bd540bc06d587a5af452

  • Size

    1.7MB

  • Sample

    221029-nq81faehgl

  • MD5

    92fbb9053a5b848a7d183cde850fb433

  • SHA1

    f6282fb26da257c58c1145f4b5a045cdcf2a6935

  • SHA256

    57bc6fce2b9062b35db2f64da1851490ac713eeed098bd540bc06d587a5af452

  • SHA512

    3d1d1b08cbfba6b77299319ed91182b7cd6f74a8d6de57a0088500f036a7f9697a719f3e45a2f03f09b23cbb6b8ea670aad8103e0c71fb0474b0d89dd6e90e9f

  • SSDEEP

    24576:LSNxksv5j/SPGvoBOSpbDOFLQa3Ke4//RJBlj6SW1Tu7TIw5:xQS5O1qJBlj6SW1GTIE

Score
8/10
persistence

Malware Config

Targets

    • Target

      57bc6fce2b9062b35db2f64da1851490ac713eeed098bd540bc06d587a5af452

    • Size

      1.7MB

    • MD5

      92fbb9053a5b848a7d183cde850fb433

    • SHA1

      f6282fb26da257c58c1145f4b5a045cdcf2a6935

    • SHA256

      57bc6fce2b9062b35db2f64da1851490ac713eeed098bd540bc06d587a5af452

    • SHA512

      3d1d1b08cbfba6b77299319ed91182b7cd6f74a8d6de57a0088500f036a7f9697a719f3e45a2f03f09b23cbb6b8ea670aad8103e0c71fb0474b0d89dd6e90e9f

    • SSDEEP

      24576:LSNxksv5j/SPGvoBOSpbDOFLQa3Ke4//RJBlj6SW1Tu7TIw5:xQS5O1qJBlj6SW1GTIE

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks