Overview

overview

8

Static

static

0944b840d9...26.exe

windows7-x64

8

0944b840d9...26.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0944b840d912d4b4fda445da6f74636611e8ed9d5321e324134d308d1ee7f426

  • Size

    4.9MB

  • Sample

    221123-lng3tsfc21

  • MD5

    b499a81aae65b47e914e6fa9b834d765

  • SHA1

    d5b62b3188af55602abc3ea1d474983f955296b9

  • SHA256

    0944b840d912d4b4fda445da6f74636611e8ed9d5321e324134d308d1ee7f426

  • SHA512

    07979308c7d8de4ae2c2367b310dbedacce06e70310d8ca1cfbdb20dac994a5e5acc34d1510050b5e55405e8e064d3af0bef3b0577e2e362901182daa6416b6a

  • SSDEEP

    98304:StcOWxKVAzdVnIy9sAGUBVvo3/9ooBGJqa6Fy81rsY9UfvQA5:SkIVkVI2sIVwP+oBGZwyI9a5

Score
8/10
discovery

Malware Config

Targets

    • Target

      0944b840d912d4b4fda445da6f74636611e8ed9d5321e324134d308d1ee7f426

    • Size

      4.9MB

    • MD5

      b499a81aae65b47e914e6fa9b834d765

    • SHA1

      d5b62b3188af55602abc3ea1d474983f955296b9

    • SHA256

      0944b840d912d4b4fda445da6f74636611e8ed9d5321e324134d308d1ee7f426

    • SHA512

      07979308c7d8de4ae2c2367b310dbedacce06e70310d8ca1cfbdb20dac994a5e5acc34d1510050b5e55405e8e064d3af0bef3b0577e2e362901182daa6416b6a

    • SSDEEP

      98304:StcOWxKVAzdVnIy9sAGUBVvo3/9ooBGJqa6Fy81rsY9UfvQA5:SkIVkVI2sIVwP+oBGZwyI9a5

    Score
    8/10
    discovery

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks