Overview

overview

8

Static

static

1f0bc9e230...97.exe

windows7-x64

8

1f0bc9e230...97.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1f0bc9e2300054c9924b47f76a8570963daa890a7c78db47db74c8468de3fc97

  • Size

    19KB

  • Sample

    221123-lt13wsfg2y

  • MD5

    56a4d509c6c9274f5c8081c67246e277

  • SHA1

    7bf6c5011b70444f8dc12bed0e0128aa0c2a8ef8

  • SHA256

    1f0bc9e2300054c9924b47f76a8570963daa890a7c78db47db74c8468de3fc97

  • SHA512

    00abc365ebf48c2584da43f7c7824f10704e68aad4ba244dd90a56ee15641d5006735cde758057cc16ae161da9ad399164a594738369d647d95148f9a86184ef

  • SSDEEP

    192:Mmd9B9FPH1M1kTpocHSpL4cJtIo/0kIGwKaaaaOaaakAdtCZ3Wdm:Mm9PH4xUUIo/LwktGG4

Score
8/10

Malware Config

Targets

    • Target

      1f0bc9e2300054c9924b47f76a8570963daa890a7c78db47db74c8468de3fc97

    • Size

      19KB

    • MD5

      56a4d509c6c9274f5c8081c67246e277

    • SHA1

      7bf6c5011b70444f8dc12bed0e0128aa0c2a8ef8

    • SHA256

      1f0bc9e2300054c9924b47f76a8570963daa890a7c78db47db74c8468de3fc97

    • SHA512

      00abc365ebf48c2584da43f7c7824f10704e68aad4ba244dd90a56ee15641d5006735cde758057cc16ae161da9ad399164a594738369d647d95148f9a86184ef

    • SSDEEP

      192:Mmd9B9FPH1M1kTpocHSpL4cJtIo/0kIGwKaaaaOaaakAdtCZ3Wdm:Mm9PH4xUUIo/LwktGG4

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks