Overview

overview

10

Static

static

10

74ce10e299...76.exe

windows7-x64

8

74ce10e299...76.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74ce10e29960f6996cc7c51aa73eaa857cbdeaca42964e62ee06c6c60edc5b76

  • Size

    71KB

  • Sample

    221125-nskevshc6v

  • MD5

    998782d6436daa9ea79cfbc7287089e1

  • SHA1

    24480e6eb1604b8ade152fd365b3a4c339eca32c

  • SHA256

    74ce10e29960f6996cc7c51aa73eaa857cbdeaca42964e62ee06c6c60edc5b76

  • SHA512

    68effa3626cb06f0ddff52bb6a8468a58a75217518808e5de58648eacd62cd642cd651fb50db52d59b61a31863e7f1dfe83360fed1af08de84167933274f636d

  • SSDEEP

    1536:KQRJQxTWZE27YHJkuXEohW3b1wOKcUelGTDXs5GfiOqJJJ:KQRJQVWyoYpHXIqOJGTDc5ce7J

Score
10/10
modiloader

Malware Config

Targets

    • Target

      74ce10e29960f6996cc7c51aa73eaa857cbdeaca42964e62ee06c6c60edc5b76

    • Size

      71KB

    • MD5

      998782d6436daa9ea79cfbc7287089e1

    • SHA1

      24480e6eb1604b8ade152fd365b3a4c339eca32c

    • SHA256

      74ce10e29960f6996cc7c51aa73eaa857cbdeaca42964e62ee06c6c60edc5b76

    • SHA512

      68effa3626cb06f0ddff52bb6a8468a58a75217518808e5de58648eacd62cd642cd651fb50db52d59b61a31863e7f1dfe83360fed1af08de84167933274f636d

    • SSDEEP

      1536:KQRJQxTWZE27YHJkuXEohW3b1wOKcUelGTDXs5GfiOqJJJ:KQRJQVWyoYpHXIqOJGTDc5ce7J

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks