Overview

overview

8

Static

static

MSDev.exe

windows7-x64

8

MSDev.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    MSDev.exe

  • Size

    254KB

  • Sample

    221101-mkad9aaha4

  • MD5

    a418886a31852be25064d3573f2bc87d

  • SHA1

    a32c247d543ed54f5a4a881882fef8e14840234c

  • SHA256

    b9e9b93e99d1a8fe172d70419181a74376af8188dcb03249037d4daea27f110e

  • SHA512

    e1b8fb71b8d544089312bc57f716d5d93bff075ac4fc1c779e649480ffadbfbfc68d1818648c4071031e2d4ef5a78bd9487902c6da8af6aeaf61cdaff1f5efb6

  • SSDEEP

    3072:MgHUDWt2bzu+dJ+2HuyplcYKxgqiTZmiJOglGGQMp0+WoY46322bJrXDXk:9vtwzFdJ+gXp6YKxe+GQ1oh6TXk

Score
8/10
persistence

Malware Config

Targets

    • Target

      MSDev.exe

    • Size

      254KB

    • MD5

      a418886a31852be25064d3573f2bc87d

    • SHA1

      a32c247d543ed54f5a4a881882fef8e14840234c

    • SHA256

      b9e9b93e99d1a8fe172d70419181a74376af8188dcb03249037d4daea27f110e

    • SHA512

      e1b8fb71b8d544089312bc57f716d5d93bff075ac4fc1c779e649480ffadbfbfc68d1818648c4071031e2d4ef5a78bd9487902c6da8af6aeaf61cdaff1f5efb6

    • SSDEEP

      3072:MgHUDWt2bzu+dJ+2HuyplcYKxgqiTZmiJOglGGQMp0+WoY46322bJrXDXk:9vtwzFdJ+gXp6YKxe+GQ1oh6TXk

    Score
    8/10
    persistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks