Overview

overview

8

Static

static

9576824fc1...98.exe

windows7-x64

8

9576824fc1...98.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9576824fc1363094601e90d65308788af106ab6201ecb5982ce44ae6aefe8c98

  • Size

    245KB

  • Sample

    221123-lnzb4sfc5z

  • MD5

    c9cce8825a7de2ea01dd92512f49f612

  • SHA1

    3dc2c3f9398e148612a57bd1cadee73204936580

  • SHA256

    9576824fc1363094601e90d65308788af106ab6201ecb5982ce44ae6aefe8c98

  • SHA512

    a2372465c6aa61d90c2e7f0aedd1d5a00ca1fffd43b4df27ae61aa9ef40493466761a9362771be13d56311827b73322144c9d19aba475f197585f397525c7628

  • SSDEEP

    6144:RIqEHYCWUt3h3HboWN64qQ8uBNuQso/6Da8sJrBxs5GJRxVJI:RIq05WM3hm4qQzNuQc0JPskRnJI

Score
8/10
persistence

Malware Config

Targets

    • Target

      9576824fc1363094601e90d65308788af106ab6201ecb5982ce44ae6aefe8c98

    • Size

      245KB

    • MD5

      c9cce8825a7de2ea01dd92512f49f612

    • SHA1

      3dc2c3f9398e148612a57bd1cadee73204936580

    • SHA256

      9576824fc1363094601e90d65308788af106ab6201ecb5982ce44ae6aefe8c98

    • SHA512

      a2372465c6aa61d90c2e7f0aedd1d5a00ca1fffd43b4df27ae61aa9ef40493466761a9362771be13d56311827b73322144c9d19aba475f197585f397525c7628

    • SSDEEP

      6144:RIqEHYCWUt3h3HboWN64qQ8uBNuQso/6Da8sJrBxs5GJRxVJI:RIq05WM3hm4qQzNuQc0JPskRnJI

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks