Overview

overview

8

Static

static

1

dec7bb42f7...b4.exe

windows7-x64

7

dec7bb42f7...b4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dec7bb42f762c5c80dda037fd4b2a55698bf7d29226b0f7a0d14aea6a2e1deb4

  • Size

    182KB

  • Sample

    221123-m59pvaba7w

  • MD5

    ee64888d8729999e2d0ee30f16c35753

  • SHA1

    437efed6a5119f03b070eeff4f4e5435dafdcf30

  • SHA256

    dec7bb42f762c5c80dda037fd4b2a55698bf7d29226b0f7a0d14aea6a2e1deb4

  • SHA512

    054683c674866aca34bf565a941c2e523e5669811c2e3671365013bc52c24d2d4417a69af2da0c0932756460b8e9521ae467fb0492ce5e72ba7b79c8da86ee6d

  • SSDEEP

    3072:RLk395hYXJGeqwKN+BCSJneMm77j2NZrpYocCAro6Ta6Xt7RDeWb6uDMdndHaTPJ:RQqgwKq1nc8ZWrv3t7UWbFM3wPw9o

Score
8/10
persistence

Malware Config

Targets

    • Target

      dec7bb42f762c5c80dda037fd4b2a55698bf7d29226b0f7a0d14aea6a2e1deb4

    • Size

      182KB

    • MD5

      ee64888d8729999e2d0ee30f16c35753

    • SHA1

      437efed6a5119f03b070eeff4f4e5435dafdcf30

    • SHA256

      dec7bb42f762c5c80dda037fd4b2a55698bf7d29226b0f7a0d14aea6a2e1deb4

    • SHA512

      054683c674866aca34bf565a941c2e523e5669811c2e3671365013bc52c24d2d4417a69af2da0c0932756460b8e9521ae467fb0492ce5e72ba7b79c8da86ee6d

    • SSDEEP

      3072:RLk395hYXJGeqwKN+BCSJneMm77j2NZrpYocCAro6Ta6Xt7RDeWb6uDMdndHaTPJ:RQqgwKq1nc8ZWrv3t7UWbFM3wPw9o

    Score
    8/10
    persistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks