Overview

overview

8

Static

static

cce8232f5b...df.exe

windows7-x64

8

cce8232f5b...df.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cce8232f5bf28c3582ffb28fa70cdf37fab4209fbc8c59255d55ae76e97e15df

  • Size

    152KB

  • Sample

    221124-xs5kgagc9y

  • MD5

    615e3c5306a1450aad5d8c90e3af40b0

  • SHA1

    ff427ff44cf25477d63782445137af60bbee71af

  • SHA256

    cce8232f5bf28c3582ffb28fa70cdf37fab4209fbc8c59255d55ae76e97e15df

  • SHA512

    4eb9da8ed088940bb47809b29d959dfd6b0553eb43584562261673ba304138c78d1c0892da0c5cd15bde77e15b0e42b96d43e63bfa9ea9f93df6284f4779922b

  • SSDEEP

    3072:Ur4dKA1qlsyqkFg4Vh574qBz9eStfG3Iq:VdKeosyqkWShd4qB59s

Score
8/10
persistence

Malware Config

Targets

    • Target

      cce8232f5bf28c3582ffb28fa70cdf37fab4209fbc8c59255d55ae76e97e15df

    • Size

      152KB

    • MD5

      615e3c5306a1450aad5d8c90e3af40b0

    • SHA1

      ff427ff44cf25477d63782445137af60bbee71af

    • SHA256

      cce8232f5bf28c3582ffb28fa70cdf37fab4209fbc8c59255d55ae76e97e15df

    • SHA512

      4eb9da8ed088940bb47809b29d959dfd6b0553eb43584562261673ba304138c78d1c0892da0c5cd15bde77e15b0e42b96d43e63bfa9ea9f93df6284f4779922b

    • SSDEEP

      3072:Ur4dKA1qlsyqkFg4Vh574qBz9eStfG3Iq:VdKeosyqkWShd4qB59s

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks