Overview

overview

8

Static

static

57c0268e52...1b.exe

windows7-x64

8

57c0268e52...1b.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    57c0268e52994413ef4d40bf7dd7bd1b.exe

  • Size

    608KB

  • Sample

    221123-qvfksseh68

  • MD5

    57c0268e52994413ef4d40bf7dd7bd1b

  • SHA1

    d4f3f08a29b9bf14f0df6a14a76199c320438117

  • SHA256

    90ca60dc8424411c71eecfcddfdb40e1fadc48e4ed287a282309b24f0cb2c5a2

  • SHA512

    ec37e31337ff83aade0c5fc25985c509ffd7f637e19fb4a368fd05b1d5894abb6a54f836bc30944b1cd6075a878073f212f9e1ecd077e1ce6cb7a8f4134d6462

  • SSDEEP

    6144:VdeLGp2lkBWkXtYUqePDfL7PX6aMRAVUxworKMk5gIrW9EE:dT0k9Y4DfL7/6pRiUNKr7sEE

Score
8/10
persistence

Malware Config

Targets

    • Target

      57c0268e52994413ef4d40bf7dd7bd1b.exe

    • Size

      608KB

    • MD5

      57c0268e52994413ef4d40bf7dd7bd1b

    • SHA1

      d4f3f08a29b9bf14f0df6a14a76199c320438117

    • SHA256

      90ca60dc8424411c71eecfcddfdb40e1fadc48e4ed287a282309b24f0cb2c5a2

    • SHA512

      ec37e31337ff83aade0c5fc25985c509ffd7f637e19fb4a368fd05b1d5894abb6a54f836bc30944b1cd6075a878073f212f9e1ecd077e1ce6cb7a8f4134d6462

    • SSDEEP

      6144:VdeLGp2lkBWkXtYUqePDfL7PX6aMRAVUxworKMk5gIrW9EE:dT0k9Y4DfL7/6pRiUNKr7sEE

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks