Overview

overview

8

Static

static

43ab08e76b...db.exe

windows7-x64

8

43ab08e76b...db.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db

  • Size

    68KB

  • Sample

    221123-s4j1pada47

  • MD5

    cbbc52dfbb625f7298b60f5a009b96cd

  • SHA1

    86cad1c71c0ef3efe1cbb7b1c35d63f6d17ed783

  • SHA256

    43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db

  • SHA512

    4dfb485e0a1c229e15ff22ee8f930f4644be278339b479dbe74d4066325111409b6ea31ac9cd61e6c808f6eea880e5cae336e54cddb23f995894d33cb241508f

  • SSDEEP

    1536:hUN0UtdKyy3LaHyOH/1xL0RmceyqoYyffdEm/y+qqohqlLs9rx3okuIO:hUN/tjy3LGH/1xgDeyqund/y+qqohqlR

Score
8/10
persistence

Malware Config

Targets

    • Target

      43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db

    • Size

      68KB

    • MD5

      cbbc52dfbb625f7298b60f5a009b96cd

    • SHA1

      86cad1c71c0ef3efe1cbb7b1c35d63f6d17ed783

    • SHA256

      43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db

    • SHA512

      4dfb485e0a1c229e15ff22ee8f930f4644be278339b479dbe74d4066325111409b6ea31ac9cd61e6c808f6eea880e5cae336e54cddb23f995894d33cb241508f

    • SSDEEP

      1536:hUN0UtdKyy3LaHyOH/1xL0RmceyqoYyffdEm/y+qqohqlLs9rx3okuIO:hUN/tjy3LGH/1xgDeyqund/y+qqohqlR

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks