Overview

overview

8

Static

static

a378103c8f...0e.exe

windows7-x64

8

a378103c8f...0e.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a378103c8f8f3766e1976a46e70d4c7f5c514fa08e04ae003b670c6bc1e59a0e

  • Size

    1.1MB

  • Sample

    221125-h6cz2saf38

  • MD5

    df3eb70752175bd0f8391f9524874fa4

  • SHA1

    0006c5e7d2681a7d8fd5e3bafc7be27bd6a9b5f9

  • SHA256

    a378103c8f8f3766e1976a46e70d4c7f5c514fa08e04ae003b670c6bc1e59a0e

  • SHA512

    2feac4e3451c5bf6661d4d9a47827e66ef4de9781649667af2895059f29076304f684b6624ac73190ff90bf959d033cd57e3d45749ee8e3486f1391c04bbcebc

  • SSDEEP

    24576:xf9I2Wjiv0j/yaMctr1SdWHJXLr1TO+qoDJd46:xFNWjiceCrkkpXP1fqWZ

Score
8/10
persistence

Malware Config

Targets

    • Target

      a378103c8f8f3766e1976a46e70d4c7f5c514fa08e04ae003b670c6bc1e59a0e

    • Size

      1.1MB

    • MD5

      df3eb70752175bd0f8391f9524874fa4

    • SHA1

      0006c5e7d2681a7d8fd5e3bafc7be27bd6a9b5f9

    • SHA256

      a378103c8f8f3766e1976a46e70d4c7f5c514fa08e04ae003b670c6bc1e59a0e

    • SHA512

      2feac4e3451c5bf6661d4d9a47827e66ef4de9781649667af2895059f29076304f684b6624ac73190ff90bf959d033cd57e3d45749ee8e3486f1391c04bbcebc

    • SSDEEP

      24576:xf9I2Wjiv0j/yaMctr1SdWHJXLr1TO+qoDJd46:xFNWjiceCrkkpXP1fqWZ

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks