Overview

overview

10

Static

static

cd1f116076...9a.exe

windows7-x64

10

cd1f116076...9a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cd1f116076c8901c528e864e516d6852f1dd1b385799133d15b868f67b5b999a

  • Size

    709KB

  • Sample

    221106-12l19sfgdq

  • MD5

    04aede17c61b27316bda2cbb8439d2fd

  • SHA1

    48f8aaa4cb9e3eb5cdd45217ea52cdfe6b4ed58e

  • SHA256

    cd1f116076c8901c528e864e516d6852f1dd1b385799133d15b868f67b5b999a

  • SHA512

    b759b441b4fdcc8999d3a3acf632f51a02fbb1098edc914262658d3cea1fe96c39efcbfdc986f43f6014580b51d005623d369fb643973c77beb7ee5ede33e89d

  • SSDEEP

    12288:rj9l69ZU++3jUOIcr1MFNXJU6m6cAhifHW8NUnVu9nNrjNHtM:rDsOIcrMXPz/8NUnVONrjNHi

Score
10/10
persistence

Malware Config

Targets

    • Target

      cd1f116076c8901c528e864e516d6852f1dd1b385799133d15b868f67b5b999a

    • Size

      709KB

    • MD5

      04aede17c61b27316bda2cbb8439d2fd

    • SHA1

      48f8aaa4cb9e3eb5cdd45217ea52cdfe6b4ed58e

    • SHA256

      cd1f116076c8901c528e864e516d6852f1dd1b385799133d15b868f67b5b999a

    • SHA512

      b759b441b4fdcc8999d3a3acf632f51a02fbb1098edc914262658d3cea1fe96c39efcbfdc986f43f6014580b51d005623d369fb643973c77beb7ee5ede33e89d

    • SSDEEP

      12288:rj9l69ZU++3jUOIcr1MFNXJU6m6cAhifHW8NUnVu9nNrjNHtM:rDsOIcrMXPz/8NUnVONrjNHi

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks