Overview

overview

8

Static

static

9e3093bd14...65.exe

windows7-x64

8

9e3093bd14...65.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9e3093bd14943e2377f366bed3ef152028ad437deb37764581995dccd4e0b465

  • Size

    209KB

  • Sample

    221123-qs6zzaeg67

  • MD5

    d960e0563aa47b856beb03a07be9e2f4

  • SHA1

    3975a52e3a27c8a2fefbc56744dc675130913091

  • SHA256

    9e3093bd14943e2377f366bed3ef152028ad437deb37764581995dccd4e0b465

  • SHA512

    0ade6894227e1004f6073218173a200f78c2aaaf4c473a808b69c99cc119922b86148570f8264033e11964cfc9b1b272646e04c48ed65751874fba5290b4cacf

  • SSDEEP

    6144:P3S2oX3HsHxuB7/rVRNNKkanUV2l5l5zA:vmMur/HV2zI

Score
8/10
persistence

Malware Config

Targets

    • Target

      9e3093bd14943e2377f366bed3ef152028ad437deb37764581995dccd4e0b465

    • Size

      209KB

    • MD5

      d960e0563aa47b856beb03a07be9e2f4

    • SHA1

      3975a52e3a27c8a2fefbc56744dc675130913091

    • SHA256

      9e3093bd14943e2377f366bed3ef152028ad437deb37764581995dccd4e0b465

    • SHA512

      0ade6894227e1004f6073218173a200f78c2aaaf4c473a808b69c99cc119922b86148570f8264033e11964cfc9b1b272646e04c48ed65751874fba5290b4cacf

    • SSDEEP

      6144:P3S2oX3HsHxuB7/rVRNNKkanUV2l5l5zA:vmMur/HV2zI

    Score
    8/10
    persistence

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks