Overview

overview

7

Static

static

b0a487a068...1d.exe

windows7-x64

3

b0a487a068...1d.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b0a487a0685a354c50ed08a7a243c8b55fb7822017884d05ff4237f5ef1dd51d

  • Size

    1.5MB

  • Sample

    221125-mpw4taba87

  • MD5

    d672a417c1bb5b2255674f43d53509b1

  • SHA1

    53d4553dc3ca8f1cb8bdbd039c7fa7a9567add97

  • SHA256

    b0a487a0685a354c50ed08a7a243c8b55fb7822017884d05ff4237f5ef1dd51d

  • SHA512

    150bbf0ac6029f9a208912a4b74cead7b57ae6c0a234d487ef969e831b401f84e24a1046bbc982ae93d6a98d90905e8d2596862152ff9b745213e09520fd5ba1

  • SSDEEP

    24576:Hpa/O74CNt3r2J2FC3eUldZUJ3OlKU4UDcc6Cy+9eG:wcZC35VcOcmDcc6Cd

Score
7/10

Malware Config

Targets

    • Target

      b0a487a0685a354c50ed08a7a243c8b55fb7822017884d05ff4237f5ef1dd51d

    • Size

      1.5MB

    • MD5

      d672a417c1bb5b2255674f43d53509b1

    • SHA1

      53d4553dc3ca8f1cb8bdbd039c7fa7a9567add97

    • SHA256

      b0a487a0685a354c50ed08a7a243c8b55fb7822017884d05ff4237f5ef1dd51d

    • SHA512

      150bbf0ac6029f9a208912a4b74cead7b57ae6c0a234d487ef969e831b401f84e24a1046bbc982ae93d6a98d90905e8d2596862152ff9b745213e09520fd5ba1

    • SSDEEP

      24576:Hpa/O74CNt3r2J2FC3eUldZUJ3OlKU4UDcc6Cy+9eG:wcZC35VcOcmDcc6Cd

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks