Overview

overview

8

Static

static

086fe6014c...ac.exe

windows7-x64

8

086fe6014c...ac.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    086fe6014caa5641006a256bc28e13b5124eb02afed787993f232bde7699efac

  • Size

    2.9MB

  • Sample

    221125-3pdv8sfc77

  • MD5

    694e084d43f49466e33b919fa09ad405

  • SHA1

    81395d259bd7db0cd466f615aaf2887e48c6edbd

  • SHA256

    086fe6014caa5641006a256bc28e13b5124eb02afed787993f232bde7699efac

  • SHA512

    2c166c9d44dae89d30d374abcf0d6aac891b40d384624cbf837e1c1fd50a8e757d1a3b69cc1916a53af857f3a01a72036df0c08ae27cd042d02e1cb2b9d27585

  • SSDEEP

    49152:9iZt2TwO/899wv4ixpkw25NCvQpx1NbCB4HnNF1ATRE0Qyc/in/Sqzlwqi2IsHow:9iZwVcO4OgTknS8qqyJ2Is2dQ3iq60

Score
8/10
persistence

Malware Config

Targets

    • Target

      086fe6014caa5641006a256bc28e13b5124eb02afed787993f232bde7699efac

    • Size

      2.9MB

    • MD5

      694e084d43f49466e33b919fa09ad405

    • SHA1

      81395d259bd7db0cd466f615aaf2887e48c6edbd

    • SHA256

      086fe6014caa5641006a256bc28e13b5124eb02afed787993f232bde7699efac

    • SHA512

      2c166c9d44dae89d30d374abcf0d6aac891b40d384624cbf837e1c1fd50a8e757d1a3b69cc1916a53af857f3a01a72036df0c08ae27cd042d02e1cb2b9d27585

    • SSDEEP

      49152:9iZt2TwO/899wv4ixpkw25NCvQpx1NbCB4HnNF1ATRE0Qyc/in/Sqzlwqi2IsHow:9iZwVcO4OgTknS8qqyJ2Is2dQ3iq60

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks