Overview

overview

8

Static

static

888cef07ce...05.exe

windows7-x64

8

888cef07ce...05.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    888cef07ce0e3d3b5f9d0862e5ff1286049028204046ade72f16fce735a44105

  • Size

    69KB

  • Sample

    221126-n9bt2scb69

  • MD5

    f074556b4be98813ee28a8bacf6bc8b4

  • SHA1

    2b4ab011bb9e7490a3cb74892d47e8fe8e033566

  • SHA256

    888cef07ce0e3d3b5f9d0862e5ff1286049028204046ade72f16fce735a44105

  • SHA512

    6dd7a66bcf8cd34440be3ebb1d93650af13b358759865e7dbb02aa8cd3760be16f8aadbe4e8fda8a4497c0e38bd2e459c1e8211031a5f8c78449659d7bb47015

  • SSDEEP

    1536:fvzDxcAxg2oucEYl0a7y9jjO8ueosFIzh:fJcAxg2ohlR7wjipPzh

Score
8/10
persistence

Malware Config

Targets

    • Target

      888cef07ce0e3d3b5f9d0862e5ff1286049028204046ade72f16fce735a44105

    • Size

      69KB

    • MD5

      f074556b4be98813ee28a8bacf6bc8b4

    • SHA1

      2b4ab011bb9e7490a3cb74892d47e8fe8e033566

    • SHA256

      888cef07ce0e3d3b5f9d0862e5ff1286049028204046ade72f16fce735a44105

    • SHA512

      6dd7a66bcf8cd34440be3ebb1d93650af13b358759865e7dbb02aa8cd3760be16f8aadbe4e8fda8a4497c0e38bd2e459c1e8211031a5f8c78449659d7bb47015

    • SSDEEP

      1536:fvzDxcAxg2oucEYl0a7y9jjO8ueosFIzh:fJcAxg2ohlR7wjipPzh

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Remote System Discovery

1
T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks