Overview

overview

8

Static

static

ab6fcfd081...1a.exe

windows7-x64

8

ab6fcfd081...1a.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    ab6fcfd0818e3eb70f0cd197619dd68de32355c9cfe70293864201f08c26a91a

  • Size

    25KB

  • Sample

    221107-lpr97acfdp

  • MD5

    a45d3564d1fa27161b33712f035a5962

  • SHA1

    c3f1f5516192ca7119c13f85dc573330584a39e2

  • SHA256

    ab6fcfd0818e3eb70f0cd197619dd68de32355c9cfe70293864201f08c26a91a

  • SHA512

    52b1ad256d5abbe73c92b43a9a10fb975e6fee9af0963de0e8e8465aa4bcd4c8812d3ce077491cca4d0cd45f9b0e4da7280aaf92635d104a5ca503fd5f789fcc

  • SSDEEP

    384:zDu9b8TMwKLeBWHXKdrkKv93Mq4za+PJrTOGbhy5OSmZQxPMZZ/0eXfYOAjtnxAE:HvGyr/0PZ7wPkrWjc3QeI

Score
8/10
persistence

Malware Config

Targets

    • Target

      ab6fcfd0818e3eb70f0cd197619dd68de32355c9cfe70293864201f08c26a91a

    • Size

      25KB

    • MD5

      a45d3564d1fa27161b33712f035a5962

    • SHA1

      c3f1f5516192ca7119c13f85dc573330584a39e2

    • SHA256

      ab6fcfd0818e3eb70f0cd197619dd68de32355c9cfe70293864201f08c26a91a

    • SHA512

      52b1ad256d5abbe73c92b43a9a10fb975e6fee9af0963de0e8e8465aa4bcd4c8812d3ce077491cca4d0cd45f9b0e4da7280aaf92635d104a5ca503fd5f789fcc

    • SSDEEP

      384:zDu9b8TMwKLeBWHXKdrkKv93Mq4za+PJrTOGbhy5OSmZQxPMZZ/0eXfYOAjtnxAE:HvGyr/0PZ7wPkrWjc3QeI

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks