Overview

overview

10

Static

static

598b721ee9...da.exe

windows7-x64

10

598b721ee9...da.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    598b721ee9ca04c19c782cc2554144469dce46f329e6f4d4700b0aadfcff2bda

  • Size

    355KB

  • Sample

    221122-zdgwzabf5s

  • MD5

    d16691c55e87aaaa500a7444077571d2

  • SHA1

    9e94e30447eaa0bde382afbf66acc587b1f151a4

  • SHA256

    598b721ee9ca04c19c782cc2554144469dce46f329e6f4d4700b0aadfcff2bda

  • SHA512

    199b630b89b51fa661f2a35e9e19b438bad72c86ade936d1e676446e4229b686f185b1b5aaae22b5bccbc7a2481676cf833cfd5a1efcd9c5cc352a073b3a56fe

  • SSDEEP

    6144:TRzRXgb3dqwQWKdSCOwhWXlYzcCA9f+v09GeufUZ4b1MVwFpJ/SS1Hxj:JG38wQ9hfc1tvuTb1MVwFPv1H1

Score
10/10
persistencephishing

Malware Config

Targets

    • Target

      598b721ee9ca04c19c782cc2554144469dce46f329e6f4d4700b0aadfcff2bda

    • Size

      355KB

    • MD5

      d16691c55e87aaaa500a7444077571d2

    • SHA1

      9e94e30447eaa0bde382afbf66acc587b1f151a4

    • SHA256

      598b721ee9ca04c19c782cc2554144469dce46f329e6f4d4700b0aadfcff2bda

    • SHA512

      199b630b89b51fa661f2a35e9e19b438bad72c86ade936d1e676446e4229b686f185b1b5aaae22b5bccbc7a2481676cf833cfd5a1efcd9c5cc352a073b3a56fe

    • SSDEEP

      6144:TRzRXgb3dqwQWKdSCOwhWXlYzcCA9f+v09GeufUZ4b1MVwFpJ/SS1Hxj:JG38wQ9hfc1tvuTb1MVwFPv1H1

    Score
    10/10
    phishingpersistence

    • Detected phishing page

      phishing

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks