Overview

overview

10

Static

static

5

46df19038c...eb.exe

windows7-x64

10

46df19038c...eb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    46df19038c6e96cae6ddd4e8f1f1889836a83d5cbacbd317208d0925259022eb

  • Size

    612KB

  • Sample

    221123-xemshaeg52

  • MD5

    03a29f4c82106669691aab94b648db66

  • SHA1

    e33a8dbf43544e00fc06f934ed253dcc56442a65

  • SHA256

    46df19038c6e96cae6ddd4e8f1f1889836a83d5cbacbd317208d0925259022eb

  • SHA512

    a7fdbaf6de13cda9cdce7e9383d0264dcaa2eac538e6ce60e4f9fa4fec7375a76f1bc41fadc51f562456048cfdf4c9bf5e530e9f6d3a26eb86e8518a05faa937

  • SSDEEP

    12288:vaWz2Mg7v3qnCi8ErQohh0F4CCJ8lnyLQHSb:yadMv6CYrjqnyLQyb

Score
10/10
persistence

Malware Config

Targets

    • Target

      46df19038c6e96cae6ddd4e8f1f1889836a83d5cbacbd317208d0925259022eb

    • Size

      612KB

    • MD5

      03a29f4c82106669691aab94b648db66

    • SHA1

      e33a8dbf43544e00fc06f934ed253dcc56442a65

    • SHA256

      46df19038c6e96cae6ddd4e8f1f1889836a83d5cbacbd317208d0925259022eb

    • SHA512

      a7fdbaf6de13cda9cdce7e9383d0264dcaa2eac538e6ce60e4f9fa4fec7375a76f1bc41fadc51f562456048cfdf4c9bf5e530e9f6d3a26eb86e8518a05faa937

    • SSDEEP

      12288:vaWz2Mg7v3qnCi8ErQohh0F4CCJ8lnyLQHSb:yadMv6CYrjqnyLQyb

    Score
    10/10
    persistence

    • Modifies system executable filetype association

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks