Overview

overview

8

Static

static

687c7d8030...c2.exe

windows7-x64

8

687c7d8030...c2.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    687c7d8030b9f15bd2ef857116ef8c0c6fe83aa998ff32dab406beb0d4e759c2

  • Size

    22KB

  • Sample

    221123-ltymrscc76

  • MD5

    79b1f47c0dfd99f974d2920a381ad91f

  • SHA1

    c440b90511dcbe337e04dd56ce582f8c7441e891

  • SHA256

    687c7d8030b9f15bd2ef857116ef8c0c6fe83aa998ff32dab406beb0d4e759c2

  • SHA512

    6b5796238b34e9245b78c58a92551372006138aab54ce224c06b4c2afae0172a984202b95c13298ffe89c2196aaaa859e7707b8c6c7615313a089f1791c7de06

  • SSDEEP

    192:tbJVvBjraenIHX9+f1qulZjYpjorHq1oynIJguqv4E5rMdPqaDdDWLkqUN:tbTpjG7X9ehZjYp4K11p5rMhXh6UN

Score
8/10

Malware Config

Targets

    • Target

      687c7d8030b9f15bd2ef857116ef8c0c6fe83aa998ff32dab406beb0d4e759c2

    • Size

      22KB

    • MD5

      79b1f47c0dfd99f974d2920a381ad91f

    • SHA1

      c440b90511dcbe337e04dd56ce582f8c7441e891

    • SHA256

      687c7d8030b9f15bd2ef857116ef8c0c6fe83aa998ff32dab406beb0d4e759c2

    • SHA512

      6b5796238b34e9245b78c58a92551372006138aab54ce224c06b4c2afae0172a984202b95c13298ffe89c2196aaaa859e7707b8c6c7615313a089f1791c7de06

    • SSDEEP

      192:tbJVvBjraenIHX9+f1qulZjYpjorHq1oynIJguqv4E5rMdPqaDdDWLkqUN:tbTpjG7X9ehZjYp4K11p5rMhXh6UN

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks