Overview

overview

8

Static

static

d5d4051c2b...34.exe

windows7-x64

8

d5d4051c2b...34.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d5d4051c2bcf89eccab06015780e302f21132187dc778c5b408ed81f52c15734

  • Size

    346KB

  • Sample

    221123-s8tqpagd6x

  • MD5

    8944274c3f2750241862f53b3b6adf7a

  • SHA1

    e0027d79c523a3f85542667da05f52d121b839eb

  • SHA256

    d5d4051c2bcf89eccab06015780e302f21132187dc778c5b408ed81f52c15734

  • SHA512

    8612700d042714ae6b43803cebb06247da9fd7d6131bd05edd4c3c084a21d9fa054db5cf2e2b86ca02744e362398298469e8b79120c46b71817c2fd89f5c3861

  • SSDEEP

    6144:2JCwIRZl8PVH1CiBnBew6eg7KjkGlq8BM:20w6l8LHBnBewiOjdo8O

Score
8/10
persistence

Malware Config

Targets

    • Target

      d5d4051c2bcf89eccab06015780e302f21132187dc778c5b408ed81f52c15734

    • Size

      346KB

    • MD5

      8944274c3f2750241862f53b3b6adf7a

    • SHA1

      e0027d79c523a3f85542667da05f52d121b839eb

    • SHA256

      d5d4051c2bcf89eccab06015780e302f21132187dc778c5b408ed81f52c15734

    • SHA512

      8612700d042714ae6b43803cebb06247da9fd7d6131bd05edd4c3c084a21d9fa054db5cf2e2b86ca02744e362398298469e8b79120c46b71817c2fd89f5c3861

    • SSDEEP

      6144:2JCwIRZl8PVH1CiBnBew6eg7KjkGlq8BM:20w6l8LHBnBewiOjdo8O

    Score
    8/10
    persistence

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Checks for any installed AV software in registry

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks