Overview

overview

8

Static

static

333194cfa6...61.exe

windows7-x64

8

333194cfa6...61.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    333194cfa62775ba7721a1a327f270c9fea9302ce575f3affc49098a0da0f961

  • Size

    65KB

  • Sample

    221123-xpgdgaff39

  • MD5

    52d8201a238c77c64d11cba3777aa960

  • SHA1

    944f334de509f682a5afa483275ddfea1ddd9319

  • SHA256

    333194cfa62775ba7721a1a327f270c9fea9302ce575f3affc49098a0da0f961

  • SHA512

    13864b55dac155221f5bd33914cee2748b1095a42b8031946db0a8aa36994cd90e17086da7f023ad840a759dd81caa8f3fb75979ade149dd7a0e1c5084fe6a38

  • SSDEEP

    768:4a4r+PpHfXGLOFCk6SLARI+WEkFfsEjUPIOuJI5R7xuMAnXMcMaJIWmS2zIzV9xD:sr+Fum5LMI+WTJjcsnXMcpm/zOxJXKJw

Score
8/10

Malware Config

Targets

    • Target

      333194cfa62775ba7721a1a327f270c9fea9302ce575f3affc49098a0da0f961

    • Size

      65KB

    • MD5

      52d8201a238c77c64d11cba3777aa960

    • SHA1

      944f334de509f682a5afa483275ddfea1ddd9319

    • SHA256

      333194cfa62775ba7721a1a327f270c9fea9302ce575f3affc49098a0da0f961

    • SHA512

      13864b55dac155221f5bd33914cee2748b1095a42b8031946db0a8aa36994cd90e17086da7f023ad840a759dd81caa8f3fb75979ade149dd7a0e1c5084fe6a38

    • SSDEEP

      768:4a4r+PpHfXGLOFCk6SLARI+WEkFfsEjUPIOuJI5R7xuMAnXMcMaJIWmS2zIzV9xD:sr+Fum5LMI+WTJjcsnXMcpm/zOxJXKJw

    Score
    8/10

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks