Overview

overview

8

Static

static

0131c05a93...1a.exe

windows7-x64

8

0131c05a93...1a.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    0131c05a93388e0595e99b9d7b78c4ae21dc0e1fd4b8b7ae3f6d85607a81db1a

  • Size

    19KB

  • Sample

    221106-lwf6haedh7

  • MD5

    28b3d87d24f2fac5ccf2205c0fa93430

  • SHA1

    9ab8d489576664e49b798f70252053722c7c0d24

  • SHA256

    0131c05a93388e0595e99b9d7b78c4ae21dc0e1fd4b8b7ae3f6d85607a81db1a

  • SHA512

    ccc437b4189ee8439648394f2109c0bfd37c608e41c86e25ea58282f9bad5eaaab9dc77c01bc0f29ed39cd47cf93ade39a29d79d58ae820e40675ecf83d441ce

  • SSDEEP

    384:Idu9LNL1QFars3y3bQpYZRDtY8alJZjLzu/vHfBy6:IM9LCWn8ZjL8PfBy6

Score
8/10

Malware Config

Targets

    • Target

      0131c05a93388e0595e99b9d7b78c4ae21dc0e1fd4b8b7ae3f6d85607a81db1a

    • Size

      19KB

    • MD5

      28b3d87d24f2fac5ccf2205c0fa93430

    • SHA1

      9ab8d489576664e49b798f70252053722c7c0d24

    • SHA256

      0131c05a93388e0595e99b9d7b78c4ae21dc0e1fd4b8b7ae3f6d85607a81db1a

    • SHA512

      ccc437b4189ee8439648394f2109c0bfd37c608e41c86e25ea58282f9bad5eaaab9dc77c01bc0f29ed39cd47cf93ade39a29d79d58ae820e40675ecf83d441ce

    • SSDEEP

      384:Idu9LNL1QFars3y3bQpYZRDtY8alJZjLzu/vHfBy6:IM9LCWn8ZjL8PfBy6

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks