Overview

overview

8

Static

static

e8f5dcf818...7a.exe

windows7-x64

8

e8f5dcf818...7a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e8f5dcf81896b376170d86ad9b038c3fa8a5b244fdb3f16a1974eb4d7d1d447a

  • Size

    248KB

  • Sample

    221124-v45y9sch8v

  • MD5

    ddb785744f6602bbb536310e0a049370

  • SHA1

    4fc360ceaafb97c006d87fdd439bd8c08f5ff057

  • SHA256

    e8f5dcf81896b376170d86ad9b038c3fa8a5b244fdb3f16a1974eb4d7d1d447a

  • SHA512

    b8e4651e7aab33e490628ecbb58a7580b455f53fb42013275291182ec187f9f7854b33e196cd989366c79745da818f5db5edd1f698dda6fe5019a1c119b93209

  • SSDEEP

    6144:V5wlTnqOff2GwZAIVmCw9sP6I6Y4FJp3NGCzUDzW+:Twl7qjvPSS6xFJp3NS

Score
8/10
persistence

Malware Config

Targets

    • Target

      e8f5dcf81896b376170d86ad9b038c3fa8a5b244fdb3f16a1974eb4d7d1d447a

    • Size

      248KB

    • MD5

      ddb785744f6602bbb536310e0a049370

    • SHA1

      4fc360ceaafb97c006d87fdd439bd8c08f5ff057

    • SHA256

      e8f5dcf81896b376170d86ad9b038c3fa8a5b244fdb3f16a1974eb4d7d1d447a

    • SHA512

      b8e4651e7aab33e490628ecbb58a7580b455f53fb42013275291182ec187f9f7854b33e196cd989366c79745da818f5db5edd1f698dda6fe5019a1c119b93209

    • SSDEEP

      6144:V5wlTnqOff2GwZAIVmCw9sP6I6Y4FJp3NGCzUDzW+:Twl7qjvPSS6xFJp3NS

    Score
    8/10
    persistence

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Checks for any installed AV software in registry

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks