Overview

overview

8

Static

static

38728c2976...00.exe

windows7-x64

8

38728c2976...00.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    38728c29761e4eb7d4a033fca4314b2078347bb0e6c3075152abb9c04c918200

  • Size

    969KB

  • Sample

    221125-c94dhsae41

  • MD5

    e267361952c70e4477944efffc41e84c

  • SHA1

    30c94cb118b41089e574441a08da8a236bd34324

  • SHA256

    38728c29761e4eb7d4a033fca4314b2078347bb0e6c3075152abb9c04c918200

  • SHA512

    6c7a9035f0382681e83f77487e6990d4119e883246aa8704f8e7b6113c26570797f1f69e72b99add373600ceb17977fc92d94506258c3fdbd952ff4f3562da53

  • SSDEEP

    12288:aJSp5mPQmbJ+IiJevZP5xmJgStg3qrYohzfvGrYohzfv:aJ3PNrvZyg0g3GYizfyYizf

Score
8/10
persistence

Malware Config

Targets

    • Target

      38728c29761e4eb7d4a033fca4314b2078347bb0e6c3075152abb9c04c918200

    • Size

      969KB

    • MD5

      e267361952c70e4477944efffc41e84c

    • SHA1

      30c94cb118b41089e574441a08da8a236bd34324

    • SHA256

      38728c29761e4eb7d4a033fca4314b2078347bb0e6c3075152abb9c04c918200

    • SHA512

      6c7a9035f0382681e83f77487e6990d4119e883246aa8704f8e7b6113c26570797f1f69e72b99add373600ceb17977fc92d94506258c3fdbd952ff4f3562da53

    • SSDEEP

      12288:aJSp5mPQmbJ+IiJevZP5xmJgStg3qrYohzfvGrYohzfv:aJ3PNrvZyg0g3GYizfyYizf

    Score
    8/10
    persistence

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Checks for any installed AV software in registry

    • Drops desktop.ini file(s)

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks