Overview

overview

7

Static

static

338123329d...7b.exe

windows7-x64

7

338123329d...7b.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    338123329d0cfd1361a219939bc5c7e88cb3eb90bf11106306eab8f92ef79a7b

  • Size

    104KB

  • Sample

    221123-vn1dvahe67

  • MD5

    443a3a821ca830f39343008f40684170

  • SHA1

    6daaa1be7e32c9eb4c9263045734f7ee965a0d93

  • SHA256

    338123329d0cfd1361a219939bc5c7e88cb3eb90bf11106306eab8f92ef79a7b

  • SHA512

    99c1d179dc47305e885a7beb839b043a94e388c67573e86f6f9b2483cc1e769b13abedf8e8d3c01ffbfbe9600b7aa8fd7689b074ba08a6b602d9de3014ea48b7

  • SSDEEP

    1536:nsxb38MhDn2fmAInL6yId2xdMGfR9TQ2g8cifaxK2jd3psK/OV16PZdpM2KczgBS:nu7nL6K7f3ixF2o9RH5BbtcH2Eq

Score
7/10

Malware Config

Targets

    • Target

      338123329d0cfd1361a219939bc5c7e88cb3eb90bf11106306eab8f92ef79a7b

    • Size

      104KB

    • MD5

      443a3a821ca830f39343008f40684170

    • SHA1

      6daaa1be7e32c9eb4c9263045734f7ee965a0d93

    • SHA256

      338123329d0cfd1361a219939bc5c7e88cb3eb90bf11106306eab8f92ef79a7b

    • SHA512

      99c1d179dc47305e885a7beb839b043a94e388c67573e86f6f9b2483cc1e769b13abedf8e8d3c01ffbfbe9600b7aa8fd7689b074ba08a6b602d9de3014ea48b7

    • SSDEEP

      1536:nsxb38MhDn2fmAInL6yId2xdMGfR9TQ2g8cifaxK2jd3psK/OV16PZdpM2KczgBS:nu7nL6K7f3ixF2o9RH5BbtcH2Eq

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

3
T1082

Peripheral Device Discovery

1
T1120

Process Discovery

1
T1057

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks