Overview

overview

8

Static

static

8f0952a514...1d.exe

windows7-x64

8

8f0952a514...1d.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    8f0952a514fedec645cf31cff6bc35d4c0bb45784fc0d466845450151d0d911d

  • Size

    292KB

  • Sample

    221030-182qasdac5

  • MD5

    90935725b576294841c3dbc1213b6400

  • SHA1

    fcad9fdecf17efc654db4601f88eb9eb009aef72

  • SHA256

    8f0952a514fedec645cf31cff6bc35d4c0bb45784fc0d466845450151d0d911d

  • SHA512

    c9d1de1cbfc56fea8af0d04a76a4a8c9c3798d2b2589a23df4e1712166c4a6bafa2e7e4e609a720c7966066c541591c1345084e6f2a82cb00c24e9f0f26d4134

  • SSDEEP

    6144:AwhBEHzWpUfPNr+DRD5fWBuxBl11tbpuhvi42nNqcG1nhCx5:1hB2zWSdWJZRxPPKeNq11nhC7

Score
8/10
persistence

Malware Config

Targets

    • Target

      8f0952a514fedec645cf31cff6bc35d4c0bb45784fc0d466845450151d0d911d

    • Size

      292KB

    • MD5

      90935725b576294841c3dbc1213b6400

    • SHA1

      fcad9fdecf17efc654db4601f88eb9eb009aef72

    • SHA256

      8f0952a514fedec645cf31cff6bc35d4c0bb45784fc0d466845450151d0d911d

    • SHA512

      c9d1de1cbfc56fea8af0d04a76a4a8c9c3798d2b2589a23df4e1712166c4a6bafa2e7e4e609a720c7966066c541591c1345084e6f2a82cb00c24e9f0f26d4134

    • SSDEEP

      6144:AwhBEHzWpUfPNr+DRD5fWBuxBl11tbpuhvi42nNqcG1nhCx5:1hB2zWSdWJZRxPPKeNq11nhC7

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks