Overview

overview

8

Static

static

459497fc9f...42.exe

windows7-x64

8

459497fc9f...42.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    459497fc9fd7f673fb4511b544183cb52f499720db976580b822849a6f5e9b42

  • Size

    679KB

  • Sample

    221105-mvyjtsfdd9

  • MD5

    12c29adf2e4cb986599e72db85f92346

  • SHA1

    b5c317bff4947054bcd0cb142dd1b9164ada84fc

  • SHA256

    459497fc9fd7f673fb4511b544183cb52f499720db976580b822849a6f5e9b42

  • SHA512

    84fc026c59e7856b375b3ba200f0a2c7385ae7b7a89a6cf3aa0bfc1c0077e0f8781652f53d3174c9a3dc52230ea417851ce30eac261acdf2730f08fb8ada3685

  • SSDEEP

    12288:t/iSu2OyFM657L8E0kwBPodLeuFixi53Z1IM2mhqDyyHucuepY/9TShDSg:t/iKN5x0ML+Y3Z1IBH9Ocue6/9TSVS

Score
8/10
persistence

Malware Config

Targets

    • Target

      459497fc9fd7f673fb4511b544183cb52f499720db976580b822849a6f5e9b42

    • Size

      679KB

    • MD5

      12c29adf2e4cb986599e72db85f92346

    • SHA1

      b5c317bff4947054bcd0cb142dd1b9164ada84fc

    • SHA256

      459497fc9fd7f673fb4511b544183cb52f499720db976580b822849a6f5e9b42

    • SHA512

      84fc026c59e7856b375b3ba200f0a2c7385ae7b7a89a6cf3aa0bfc1c0077e0f8781652f53d3174c9a3dc52230ea417851ce30eac261acdf2730f08fb8ada3685

    • SSDEEP

      12288:t/iSu2OyFM657L8E0kwBPodLeuFixi53Z1IM2mhqDyyHucuepY/9TShDSg:t/iKN5x0ML+Y3Z1IBH9Ocue6/9TSVS

    Score
    8/10
    persistence

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks