Overview

overview

8

Static

static

6b7556f041...ab.exe

windows7-x64

8

6b7556f041...ab.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6b7556f041002f20a35ac528e4732f257357f0edeb47f759f591a884960c6eab

  • Size

    241KB

  • Sample

    221123-hmj91shf3x

  • MD5

    bcfac5bc01c61811fb62470e9b23bd38

  • SHA1

    0fd0506958682877a7a599112786ab0ac0b2f9ab

  • SHA256

    6b7556f041002f20a35ac528e4732f257357f0edeb47f759f591a884960c6eab

  • SHA512

    05b1509f5ba3c7e3f1488d92d8a58ea46b8f53ad33b0ee8fefa5ebae779a0e377f5b4842f2aadff551d44d58e7a9c66f01efa4ece853da9d4c2d3f3574878267

  • SSDEEP

    6144:zZXBsWqsE/Ao+mv8Qv0LVmwq4FU0nN876NKx6afRstZzwU:lXmwRo+mv8QD4+0N46NKx6KbU

Score
8/10
discovery

Malware Config

Targets

    • Target

      6b7556f041002f20a35ac528e4732f257357f0edeb47f759f591a884960c6eab

    • Size

      241KB

    • MD5

      bcfac5bc01c61811fb62470e9b23bd38

    • SHA1

      0fd0506958682877a7a599112786ab0ac0b2f9ab

    • SHA256

      6b7556f041002f20a35ac528e4732f257357f0edeb47f759f591a884960c6eab

    • SHA512

      05b1509f5ba3c7e3f1488d92d8a58ea46b8f53ad33b0ee8fefa5ebae779a0e377f5b4842f2aadff551d44d58e7a9c66f01efa4ece853da9d4c2d3f3574878267

    • SSDEEP

      6144:zZXBsWqsE/Ao+mv8Qv0LVmwq4FU0nN876NKx6afRstZzwU:lXmwRo+mv8QD4+0N46NKx6KbU

    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks