Overview

overview

8

Static

static

8511134429´.msi

windows7-x64

8

8511134429´.msi

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ID-.8458351205.zip

  • Size

    7.9MB

  • Sample

    221124-lpxjxahe8y

  • MD5

    ca4ace471db7357e0c3409941bf3a43e

  • SHA1

    d6020ac3fb02ad2fd8d20f1cc95e657891e83b01

  • SHA256

    111060bd2442807db5d091608228d41063b42cc6878466ee6793c4cf4035ea3c

  • SHA512

    c3e53fa77f72a3fd6929ea28ef8c14e915a9ce6cdda0c7031bf5b4f5eb0ec02ad2a14d0e047eecff71b9a965cfc36d38139ddb5aacf7ad0ad2e460fc9403651c

  • SSDEEP

    196608:IDFU+sD+fQ+80gxjQi4yw61nKJEj5iH6ZhX6wEm/g9IaXyWQ6OB:mUnaC04GMKuWdm/g9IaiWQNB

Score
8/10
persistence

Malware Config

Targets

    • Target

      8511134429´.msi

    • Size

      8.1MB

    • MD5

      e108ab26827b27789f09ecdcc3336784

    • SHA1

      506a6cc7838b4b1e08d74061651d9c11cceb485a

    • SHA256

      eed25e577021fe8f43b3b78c7ce7bd0ec0087fd53258536f262533d0cae4177f

    • SHA512

      330c285fc6e6adccfbff8ebe2ea8874d0dae3b483f705e89d2d9f3705ef471c6511d57330561dddfe2f4fb7b3ebf03e9bfc76d40ba77a8209d4717990782329d

    • SSDEEP

      196608:UoPtK2mD6DYC+0ExJsqW6s0ZhW3wx/Q9exNf+8iSJQX+qDc2u6j:HVKPAG0UIWW6+5SJQX+qQ2uY

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks