Overview

overview

8

Static

static

1

ca1b26438c...2b.exe

windows7-x64

8

ca1b26438c...2b.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ca1b26438cac897c0d3ae3da5c680a66442e84763ffe0ed404bbc94539bac62b

  • Size

    349KB

  • Sample

    221107-wq9kzabcb8

  • MD5

    0d61814785eb1776ccb70b0899e2d81f

  • SHA1

    f49aff6501da4b8d41761f68c7d2445bfceb32ce

  • SHA256

    ca1b26438cac897c0d3ae3da5c680a66442e84763ffe0ed404bbc94539bac62b

  • SHA512

    c4e8e911ccdec315a3951bd89a34dbeada9fa8b787d0f8e86ba38a9de39421319e20e22e15740829fa818a6c48856ff3fa757e9436d6305aace3d9e9fbc781ef

  • SSDEEP

    6144:ye340Hnu/EJXAF8u1qBhGNy4909VezjiGF+nh9CUZLcb+FPJ:yEJXs1q2N1906jidGUZLcb+FPJ

Score
8/10

Malware Config

Targets

    • Target

      ca1b26438cac897c0d3ae3da5c680a66442e84763ffe0ed404bbc94539bac62b

    • Size

      349KB

    • MD5

      0d61814785eb1776ccb70b0899e2d81f

    • SHA1

      f49aff6501da4b8d41761f68c7d2445bfceb32ce

    • SHA256

      ca1b26438cac897c0d3ae3da5c680a66442e84763ffe0ed404bbc94539bac62b

    • SHA512

      c4e8e911ccdec315a3951bd89a34dbeada9fa8b787d0f8e86ba38a9de39421319e20e22e15740829fa818a6c48856ff3fa757e9436d6305aace3d9e9fbc781ef

    • SSDEEP

      6144:ye340Hnu/EJXAF8u1qBhGNy4909VezjiGF+nh9CUZLcb+FPJ:yEJXs1q2N1906jidGUZLcb+FPJ

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks