Overview

overview

8

Static

static

39b1178e55...34.exe

windows7-x64

8

39b1178e55...34.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    39b1178e550ab88a46cbb0de820ab66478431802ef076e1a1621aa3c12b16134

  • Size

    1.1MB

  • Sample

    221126-2msqyaeb51

  • MD5

    828ecb0f5803a567766468c175b9edfc

  • SHA1

    b3043d9553f70b32275de21646a59a89c950649f

  • SHA256

    39b1178e550ab88a46cbb0de820ab66478431802ef076e1a1621aa3c12b16134

  • SHA512

    44b866d6b7aa48ff62eed448f4b04b8b5fd0544cdd731febb9b7453a4c88dc9fd5896811c21a56ab668f38b76e37057fb91ef6041a6e5e5fb9a02884e3aa9795

  • SSDEEP

    24576:nc//////VTfz84KYWx1h17op53+mUDkubit+nCTJu41sq9t4akdqAQ13FuG:nc//////VTA49Wxn1g5umUDkYno19AQ1

Score
8/10
persistence

Malware Config

Targets

    • Target

      39b1178e550ab88a46cbb0de820ab66478431802ef076e1a1621aa3c12b16134

    • Size

      1.1MB

    • MD5

      828ecb0f5803a567766468c175b9edfc

    • SHA1

      b3043d9553f70b32275de21646a59a89c950649f

    • SHA256

      39b1178e550ab88a46cbb0de820ab66478431802ef076e1a1621aa3c12b16134

    • SHA512

      44b866d6b7aa48ff62eed448f4b04b8b5fd0544cdd731febb9b7453a4c88dc9fd5896811c21a56ab668f38b76e37057fb91ef6041a6e5e5fb9a02884e3aa9795

    • SSDEEP

      24576:nc//////VTfz84KYWx1h17op53+mUDkubit+nCTJu41sq9t4akdqAQ13FuG:nc//////VTA49Wxn1g5umUDkYno19AQ1

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks