Overview

overview

8

Static

static

1

89dbfb8134...de.exe

windows7-x64

7

89dbfb8134...de.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    89dbfb813451f2ea3b27fc03add2639022baf34566ac41afda270efa7aebb0de

  • Size

    269KB

  • Sample

    221123-m42ylsah91

  • MD5

    877b08af394dd5ab42f34537d1d9e240

  • SHA1

    92b8467bb2c4b85bb121b237a3c26386f342aaef

  • SHA256

    89dbfb813451f2ea3b27fc03add2639022baf34566ac41afda270efa7aebb0de

  • SHA512

    6428325122520b27622002884369a448831d020c29ac04a9a27b5d8867a346b0c7363a8692e9fa8df7226994a6427ebf78522e3d481c025ca33a53ab91ff29b4

  • SSDEEP

    6144:tQqUU1zmDEfILSc96NuINMkH29gCHA9guaB8/VDnKTKlVc8Zb:gU1zm4MSudnVEa8dDDA8Zb

Score
8/10
persistence

Malware Config

Targets

    • Target

      89dbfb813451f2ea3b27fc03add2639022baf34566ac41afda270efa7aebb0de

    • Size

      269KB

    • MD5

      877b08af394dd5ab42f34537d1d9e240

    • SHA1

      92b8467bb2c4b85bb121b237a3c26386f342aaef

    • SHA256

      89dbfb813451f2ea3b27fc03add2639022baf34566ac41afda270efa7aebb0de

    • SHA512

      6428325122520b27622002884369a448831d020c29ac04a9a27b5d8867a346b0c7363a8692e9fa8df7226994a6427ebf78522e3d481c025ca33a53ab91ff29b4

    • SSDEEP

      6144:tQqUU1zmDEfILSc96NuINMkH29gCHA9guaB8/VDnKTKlVc8Zb:gU1zm4MSudnVEa8dDDA8Zb

    Score
    8/10
    persistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks