Overview

overview

8

Static

static

e75ce0629d...98.exe

windows7-x64

8

e75ce0629d...98.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e75ce0629d45514cdf6ac63e05dc1df8855ca057e2e2903a6067cbbc9ac14b98

  • Size

    1.6MB

  • Sample

    221123-lm928abg62

  • MD5

    e79441b4ee155de683b050dd9873ceab

  • SHA1

    3e0964893f307e16f42ec40a5f45bb1e5522b991

  • SHA256

    e75ce0629d45514cdf6ac63e05dc1df8855ca057e2e2903a6067cbbc9ac14b98

  • SHA512

    f6444e455cf168fa9a46602764660d01eb88d9f9a4fb98d6c8a4147406ff293fd6348e8aab50c8c508f62b471c5d64985147e41bb4af35d1ff89ad2c35a8f990

  • SSDEEP

    384:1LsxK3F8+KVDWED/+D0YfxGV9SpRk854PmE3BcowRsbQywLT9npzl+1tln5y1kzg:VsgG+nEDOdfk2ps3GFsypMt1uZrV

Score
8/10
persistence

Malware Config

Targets

    • Target

      e75ce0629d45514cdf6ac63e05dc1df8855ca057e2e2903a6067cbbc9ac14b98

    • Size

      1.6MB

    • MD5

      e79441b4ee155de683b050dd9873ceab

    • SHA1

      3e0964893f307e16f42ec40a5f45bb1e5522b991

    • SHA256

      e75ce0629d45514cdf6ac63e05dc1df8855ca057e2e2903a6067cbbc9ac14b98

    • SHA512

      f6444e455cf168fa9a46602764660d01eb88d9f9a4fb98d6c8a4147406ff293fd6348e8aab50c8c508f62b471c5d64985147e41bb4af35d1ff89ad2c35a8f990

    • SSDEEP

      384:1LsxK3F8+KVDWED/+D0YfxGV9SpRk854PmE3BcowRsbQywLT9npzl+1tln5y1kzg:VsgG+nEDOdfk2ps3GFsypMt1uZrV

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks