Overview

overview

7

Static

static

4912c72d9e...d6.exe

windows7-x64

3

4912c72d9e...d6.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4912c72d9e956e968cd86916fecb1ea5c2f1da5fb78ce2e603111cad571297d6

  • Size

    307KB

  • Sample

    221125-cegk9sgd9y

  • MD5

    cfc76cf1dd083e20811d0f2b2065659c

  • SHA1

    98615fb125439748dbcd41c7e00aa4cacb2bed1d

  • SHA256

    4912c72d9e956e968cd86916fecb1ea5c2f1da5fb78ce2e603111cad571297d6

  • SHA512

    22d5c97a76e8a2101a25effd0a569de51eaca7dadedf1e0a00101a4d9565512375a006dc25d27499a919576b9c0349b78ad4fd085658cf2939e30c54d4411f01

  • SSDEEP

    3072:NQUmZVX/L7wxxxfrjPUs7QQKYpOzn1nUn1SBlwbYEnb:NmXz7w7xzjPUyQjYpOz1UnkARnb

Score
7/10

Malware Config

Targets

    • Target

      4912c72d9e956e968cd86916fecb1ea5c2f1da5fb78ce2e603111cad571297d6

    • Size

      307KB

    • MD5

      cfc76cf1dd083e20811d0f2b2065659c

    • SHA1

      98615fb125439748dbcd41c7e00aa4cacb2bed1d

    • SHA256

      4912c72d9e956e968cd86916fecb1ea5c2f1da5fb78ce2e603111cad571297d6

    • SHA512

      22d5c97a76e8a2101a25effd0a569de51eaca7dadedf1e0a00101a4d9565512375a006dc25d27499a919576b9c0349b78ad4fd085658cf2939e30c54d4411f01

    • SSDEEP

      3072:NQUmZVX/L7wxxxfrjPUs7QQKYpOzn1nUn1SBlwbYEnb:NmXz7w7xzjPUyQjYpOz1UnkARnb

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks