Overview

overview

8

Static

static

ec3dd2cbc9...af.exe

windows7-x64

8

ec3dd2cbc9...af.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ec3dd2cbc903c850f1eaaee1d90fec049983500a07037ffb0732596442998aaf

  • Size

    65KB

  • Sample

    221123-xqjvzsaf81

  • MD5

    4fc491a5fb9d8715e542378b6d18dd10

  • SHA1

    6148a8803022d1c2d061e87dfea8f3f2a6ecbd4d

  • SHA256

    ec3dd2cbc903c850f1eaaee1d90fec049983500a07037ffb0732596442998aaf

  • SHA512

    1d117fdcf0d1c8e42a589bae28292ffa9d291d51ddb287ee08cb4c78862ff70770737bbb2051265f14f195f7a7863ed281101cf32cfaf5e7a16e89f05f6b6723

  • SSDEEP

    768:4a4r+PpHfXGLOFCk6SLARI+WEkFfsEjUPIOuJI5R7xuMAnXMcMaJIWmS2zIzV9xX:sr+Fum5LMI+WTJjcsnXMcpm/zOxJXKJA

Score
8/10

Malware Config

Targets

    • Target

      ec3dd2cbc903c850f1eaaee1d90fec049983500a07037ffb0732596442998aaf

    • Size

      65KB

    • MD5

      4fc491a5fb9d8715e542378b6d18dd10

    • SHA1

      6148a8803022d1c2d061e87dfea8f3f2a6ecbd4d

    • SHA256

      ec3dd2cbc903c850f1eaaee1d90fec049983500a07037ffb0732596442998aaf

    • SHA512

      1d117fdcf0d1c8e42a589bae28292ffa9d291d51ddb287ee08cb4c78862ff70770737bbb2051265f14f195f7a7863ed281101cf32cfaf5e7a16e89f05f6b6723

    • SSDEEP

      768:4a4r+PpHfXGLOFCk6SLARI+WEkFfsEjUPIOuJI5R7xuMAnXMcMaJIWmS2zIzV9xX:sr+Fum5LMI+WTJjcsnXMcpm/zOxJXKJA

    Score
    8/10

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks