Overview

overview

8

Static

static

9e8c9596be...9d.exe

windows7-x64

8

9e8c9596be...9d.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9e8c9596bea2c560264b69f33e625630b4e7b1657cc79c58b89a83f81fc8529d

  • Size

    216KB

  • Sample

    221106-mx6cfsgcf3

  • MD5

    13dde0f9ec77fb74c17be791f3a4c909

  • SHA1

    fc7daf80fa740122571cce040cb66e1ac65bbcfc

  • SHA256

    9e8c9596bea2c560264b69f33e625630b4e7b1657cc79c58b89a83f81fc8529d

  • SHA512

    94745a733b05e56acb09819c9b94dd61be89160fbbfd57f90ff5cc230affeb6b21261016f26f5d5bec0e94988f7e8d912914c1ce983adec145445b9b78a2ddbf

  • SSDEEP

    6144:pF83J74px47zj6AHTBj82Uz8MtSGRxwyE:n83p6UTx86MDRxk

Score
8/10
persistence

Malware Config

Targets

    • Target

      9e8c9596bea2c560264b69f33e625630b4e7b1657cc79c58b89a83f81fc8529d

    • Size

      216KB

    • MD5

      13dde0f9ec77fb74c17be791f3a4c909

    • SHA1

      fc7daf80fa740122571cce040cb66e1ac65bbcfc

    • SHA256

      9e8c9596bea2c560264b69f33e625630b4e7b1657cc79c58b89a83f81fc8529d

    • SHA512

      94745a733b05e56acb09819c9b94dd61be89160fbbfd57f90ff5cc230affeb6b21261016f26f5d5bec0e94988f7e8d912914c1ce983adec145445b9b78a2ddbf

    • SSDEEP

      6144:pF83J74px47zj6AHTBj82Uz8MtSGRxwyE:n83p6UTx86MDRxk

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks