Overview

overview

8

Static

static

fff12ddf77...e2.exe

windows7-x64

8

fff12ddf77...e2.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    fff12ddf77c43661997b767b75fd37231c6b419fe7e443fdd0978e11aea312e2

  • Size

    109KB

  • Sample

    221121-vvmfkaec7w

  • MD5

    301dcbc3eb0b0260f0db9c0b54e41d60

  • SHA1

    6e49220846e19f6ad4ac48dd8c10f2bbabe7c8df

  • SHA256

    fff12ddf77c43661997b767b75fd37231c6b419fe7e443fdd0978e11aea312e2

  • SHA512

    d61b727ee3dacb4a0dd9331e3f220d77b4c2f107d970c5303cc88a29e53372c750a6a1217fce18ae403367fb2e9b0b967b433d02f277fee36822a80d1b917ab9

  • SSDEEP

    3072:msJ2AuiVe0wDY4Pqql5PKoiXI4l6n2MPU7D4:msAdlDY4dDKyF2M8Y

Score
8/10
persistence

Malware Config

Targets

    • Target

      fff12ddf77c43661997b767b75fd37231c6b419fe7e443fdd0978e11aea312e2

    • Size

      109KB

    • MD5

      301dcbc3eb0b0260f0db9c0b54e41d60

    • SHA1

      6e49220846e19f6ad4ac48dd8c10f2bbabe7c8df

    • SHA256

      fff12ddf77c43661997b767b75fd37231c6b419fe7e443fdd0978e11aea312e2

    • SHA512

      d61b727ee3dacb4a0dd9331e3f220d77b4c2f107d970c5303cc88a29e53372c750a6a1217fce18ae403367fb2e9b0b967b433d02f277fee36822a80d1b917ab9

    • SSDEEP

      3072:msJ2AuiVe0wDY4Pqql5PKoiXI4l6n2MPU7D4:msAdlDY4dDKyF2M8Y

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks