Overview

overview

8

Static

static

1

5e8e046ec4...f6.exe

windows7-x64

8

5e8e046ec4...f6.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5e8e046ec47d9fa95a3d94fe465ed7e1e07ff8dcd77d3cc57d647559ae6400f6

  • Size

    207KB

  • Sample

    221124-jn4wgshg64

  • MD5

    06a3c6eef03c24505b9c2152ec78380a

  • SHA1

    3dbe9afc76c4099e57df6402b199c650b1d98681

  • SHA256

    5e8e046ec47d9fa95a3d94fe465ed7e1e07ff8dcd77d3cc57d647559ae6400f6

  • SHA512

    9d3759f934ef6bf57246c49c8121f0fa5b69d9393902a5a15c7ef1e400e4682a373142a471a8100886776602ac0c3f722b2aea86d1ca57dbc0e7157237ebf58a

  • SSDEEP

    3072:EDQkrZoosbIfXJ6S6W6DW6czlhFgChaK8nqyRvd2DT3LNBvv0ArGAK0ZlljM8+7k:EDpoeLRvJD+q8lEbLfhKsVM4Cm

Score
8/10
persistence

Malware Config

Targets

    • Target

      5e8e046ec47d9fa95a3d94fe465ed7e1e07ff8dcd77d3cc57d647559ae6400f6

    • Size

      207KB

    • MD5

      06a3c6eef03c24505b9c2152ec78380a

    • SHA1

      3dbe9afc76c4099e57df6402b199c650b1d98681

    • SHA256

      5e8e046ec47d9fa95a3d94fe465ed7e1e07ff8dcd77d3cc57d647559ae6400f6

    • SHA512

      9d3759f934ef6bf57246c49c8121f0fa5b69d9393902a5a15c7ef1e400e4682a373142a471a8100886776602ac0c3f722b2aea86d1ca57dbc0e7157237ebf58a

    • SSDEEP

      3072:EDQkrZoosbIfXJ6S6W6DW6czlhFgChaK8nqyRvd2DT3LNBvv0ArGAK0ZlljM8+7k:EDpoeLRvJD+q8lEbLfhKsVM4Cm

    Score
    8/10
    persistence

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Checks for any installed AV software in registry

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks