Overview

overview

7

Static

static

b8aa6c2d19...97.exe

windows7-x64

7

b8aa6c2d19...97.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b8aa6c2d19630d275a0ce64fdcbba7034bbd2afbdbe1d6e5b81988c1a195ec97

  • Size

    113KB

  • Sample

    221123-zhz84sga5t

  • MD5

    483f9ca4dc8862b4c1d082fa2fbc62e3

  • SHA1

    b09e81d95c334950f8fad48bbe3b9b6bb027c9b0

  • SHA256

    b8aa6c2d19630d275a0ce64fdcbba7034bbd2afbdbe1d6e5b81988c1a195ec97

  • SHA512

    482fdd7afcb4c3d6e7ed80d65d19e133a61f478a43d2af77531b53ae42d441c2b15e8b49b7da6c58c3c7cd1bae28cb64f98b3792e062714a20ac775032669623

  • SSDEEP

    3072:XemcyqFcEJrRL5JbfHmTy6ol2M5bh85VN+umgLFIq:Xi1Fz7mMkc18PNIgJ

Score
7/10

Malware Config

Targets

    • Target

      b8aa6c2d19630d275a0ce64fdcbba7034bbd2afbdbe1d6e5b81988c1a195ec97

    • Size

      113KB

    • MD5

      483f9ca4dc8862b4c1d082fa2fbc62e3

    • SHA1

      b09e81d95c334950f8fad48bbe3b9b6bb027c9b0

    • SHA256

      b8aa6c2d19630d275a0ce64fdcbba7034bbd2afbdbe1d6e5b81988c1a195ec97

    • SHA512

      482fdd7afcb4c3d6e7ed80d65d19e133a61f478a43d2af77531b53ae42d441c2b15e8b49b7da6c58c3c7cd1bae28cb64f98b3792e062714a20ac775032669623

    • SSDEEP

      3072:XemcyqFcEJrRL5JbfHmTy6ol2M5bh85VN+umgLFIq:Xi1Fz7mMkc18PNIgJ

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks