Overview

overview

7

Static

static

1

c86d68b039...0a.exe

windows7-x64

7

c86d68b039...0a.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c86d68b039b597ae1e07351f2706105886972e8973561b84bc2f22e4088aa30a

  • Size

    1.4MB

  • Sample

    221123-zdzrsacf26

  • MD5

    16998e10023323dae5dcf8e401c00619

  • SHA1

    645a43cfaf2751f3a9af02bf9a6ff60fe71fcbdc

  • SHA256

    c86d68b039b597ae1e07351f2706105886972e8973561b84bc2f22e4088aa30a

  • SHA512

    445464cf76514dd55ad3e83ff8fb5f77978f41e2fca5262778a77edae4f28d494a429bb248142457e52bcf42ed6cc96b52253aa7ad830829c971c657f7f68f66

  • SSDEEP

    24576:5kr/4p6qO4pDlPJsZtZQk5p8hulbEwfDpBzjRvdsxlTShiVNPV9:a/4Qf4pxPctqG8IllnxvdsxZ4UtV9

Score
7/10

Malware Config

Targets

    • Target

      c86d68b039b597ae1e07351f2706105886972e8973561b84bc2f22e4088aa30a

    • Size

      1.4MB

    • MD5

      16998e10023323dae5dcf8e401c00619

    • SHA1

      645a43cfaf2751f3a9af02bf9a6ff60fe71fcbdc

    • SHA256

      c86d68b039b597ae1e07351f2706105886972e8973561b84bc2f22e4088aa30a

    • SHA512

      445464cf76514dd55ad3e83ff8fb5f77978f41e2fca5262778a77edae4f28d494a429bb248142457e52bcf42ed6cc96b52253aa7ad830829c971c657f7f68f66

    • SSDEEP

      24576:5kr/4p6qO4pDlPJsZtZQk5p8hulbEwfDpBzjRvdsxlTShiVNPV9:a/4Qf4pxPctqG8IllnxvdsxZ4UtV9

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks