Overview

overview

8

Static

static

5b48313826...c1.exe

windows7-x64

8

5b48313826...c1.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    5b48313826270d4bf66bccaa2ebd4d9c6409fd879a1d8454ed252230edb753c1

  • Size

    268KB

  • Sample

    221125-yhlv2sba99

  • MD5

    32c74e75b30423f71da094c9abed6c06

  • SHA1

    e30def0eff21af4aca8c34e379b5c4caa628ba40

  • SHA256

    5b48313826270d4bf66bccaa2ebd4d9c6409fd879a1d8454ed252230edb753c1

  • SHA512

    fcec012b331a5b79cd1638e119fe1b8cc69a4fe4f2111f3797ee0d9cb1966552494c8f151f9f638a84d5fa8ef3b66dbb3b3b2aef854eb0b42f603d3bc49bec84

  • SSDEEP

    3072:VtTWSxQcdXCUkU/pXE0VaQRo5l7aOW//5LLCoyLVZXxsfCMCyMlj9l4LPjBO:Vt3RdXCUkypwvl7aOWn5Ss+Pks

Score
8/10
persistence

Malware Config

Targets

    • Target

      5b48313826270d4bf66bccaa2ebd4d9c6409fd879a1d8454ed252230edb753c1

    • Size

      268KB

    • MD5

      32c74e75b30423f71da094c9abed6c06

    • SHA1

      e30def0eff21af4aca8c34e379b5c4caa628ba40

    • SHA256

      5b48313826270d4bf66bccaa2ebd4d9c6409fd879a1d8454ed252230edb753c1

    • SHA512

      fcec012b331a5b79cd1638e119fe1b8cc69a4fe4f2111f3797ee0d9cb1966552494c8f151f9f638a84d5fa8ef3b66dbb3b3b2aef854eb0b42f603d3bc49bec84

    • SSDEEP

      3072:VtTWSxQcdXCUkU/pXE0VaQRo5l7aOW//5LLCoyLVZXxsfCMCyMlj9l4LPjBO:Vt3RdXCUkypwvl7aOWn5Ss+Pks

    Score
    8/10
    persistence

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Checks for any installed AV software in registry

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks