Overview

overview

8

Static

static

file.exe

windows7-x64

8

file.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    7.2MB

  • Sample

    221123-vn4q9sce3y

  • MD5

    a66a69af8d39a05f2172d0a54edcd4ae

  • SHA1

    09dd071d32fae6d8a7e10cf29a4329f1aa3559a0

  • SHA256

    2fba02155f15f81201f742c9f6eeb7020cbc6d38060bd323d9ecb1187cb59ebe

  • SHA512

    2dfe8fc02111cb972539b8d4512056c88a88006e621d2564f6c27fece1b5e8e4c4717007e3ac418018d245b28d36ada4aeca588a882d95c9fdde3b854d6dc800

  • SSDEEP

    196608:91ODRpw23l86xLVz7p03JjboHEf0jw/L6lrvZXyCWB9iqOhk:3OD78Gz7p03ZAEw8YrxCNKqOq

Score
8/10

Malware Config

Targets

    • Target

      file.exe

    • Size

      7.2MB

    • MD5

      a66a69af8d39a05f2172d0a54edcd4ae

    • SHA1

      09dd071d32fae6d8a7e10cf29a4329f1aa3559a0

    • SHA256

      2fba02155f15f81201f742c9f6eeb7020cbc6d38060bd323d9ecb1187cb59ebe

    • SHA512

      2dfe8fc02111cb972539b8d4512056c88a88006e621d2564f6c27fece1b5e8e4c4717007e3ac418018d245b28d36ada4aeca588a882d95c9fdde3b854d6dc800

    • SSDEEP

      196608:91ODRpw23l86xLVz7p03JjboHEf0jw/L6lrvZXyCWB9iqOhk:3OD78Gz7p03ZAEw8YrxCNKqOq

    Score
    8/10

    • Executes dropped EXE

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks