Overview

overview

8

Static

static

e22630225a...48.exe

windows7-x64

8

e22630225a...48.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e22630225a736abff39be497ca526e89c07d4806ece58f3b4d4d764fff5c8248

  • Size

    620KB

  • Sample

    221123-zwpdrsha41

  • MD5

    448948245976e63b7b21994ed26fb170

  • SHA1

    f220add2d29c1ebd25a31afb5f45cd8b232591e9

  • SHA256

    e22630225a736abff39be497ca526e89c07d4806ece58f3b4d4d764fff5c8248

  • SHA512

    9ab347f7b336b06d3bc5807291e292c89a28adf389eea3577a502445bd1e0fa4cface2921aba39bd414673ab8ed046c11058085931c0840c2d82171253523c5e

  • SSDEEP

    12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y

Score
8/10

Malware Config

Targets

    • Target

      e22630225a736abff39be497ca526e89c07d4806ece58f3b4d4d764fff5c8248

    • Size

      620KB

    • MD5

      448948245976e63b7b21994ed26fb170

    • SHA1

      f220add2d29c1ebd25a31afb5f45cd8b232591e9

    • SHA256

      e22630225a736abff39be497ca526e89c07d4806ece58f3b4d4d764fff5c8248

    • SHA512

      9ab347f7b336b06d3bc5807291e292c89a28adf389eea3577a502445bd1e0fa4cface2921aba39bd414673ab8ed046c11058085931c0840c2d82171253523c5e

    • SSDEEP

      12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks