Overview

overview

8

Static

static

5aae8a0a6f...37.exe

windows7-x64

8

5aae8a0a6f...37.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5aae8a0a6ffaa86e20b2181a837b58f7607126bb0ecf46fc133d614b7b4d3037

  • Size

    66KB

  • Sample

    221123-x1kj9sbe9x

  • MD5

    450a10e9d651296f4fb3a1668aed2180

  • SHA1

    e192cec4d845b157b79b8d62e27e4542d1d4c457

  • SHA256

    5aae8a0a6ffaa86e20b2181a837b58f7607126bb0ecf46fc133d614b7b4d3037

  • SHA512

    c590a4452d54469832e01aa10857b2adf7e4b7d76bbd9aa8e06df2952e1eabbe37e2b5379318b40025026b263bb8b748c70067386141511c2839ad03475a4c69

  • SSDEEP

    768:4a4r+PpHfXGLOFCk6SLARI+WEkFfsEjUPIOuJI5R7xuMAnXMcMaJIWmS2zIzV9xo:sr+Fum5LMI+WTJjcsnXMcpm/zOxJXKJR

Score
8/10

Malware Config

Targets

    • Target

      5aae8a0a6ffaa86e20b2181a837b58f7607126bb0ecf46fc133d614b7b4d3037

    • Size

      66KB

    • MD5

      450a10e9d651296f4fb3a1668aed2180

    • SHA1

      e192cec4d845b157b79b8d62e27e4542d1d4c457

    • SHA256

      5aae8a0a6ffaa86e20b2181a837b58f7607126bb0ecf46fc133d614b7b4d3037

    • SHA512

      c590a4452d54469832e01aa10857b2adf7e4b7d76bbd9aa8e06df2952e1eabbe37e2b5379318b40025026b263bb8b748c70067386141511c2839ad03475a4c69

    • SSDEEP

      768:4a4r+PpHfXGLOFCk6SLARI+WEkFfsEjUPIOuJI5R7xuMAnXMcMaJIWmS2zIzV9xo:sr+Fum5LMI+WTJjcsnXMcpm/zOxJXKJR

    Score
    8/10

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks