Overview

overview

7

Static

static

348c0e4152...4e.exe

windows7-x64

3

348c0e4152...4e.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    348c0e4152c5fa97311c4f0ceeba8f3471c80f947ebc78dfe62aca396bd83b4e

  • Size

    143KB

  • Sample

    221127-nnwmbsha7z

  • MD5

    ea99aa4d2a21dc691976f30ee5eff8ac

  • SHA1

    ff883881ddffa6597a3b99a24a7ffedc54bad986

  • SHA256

    348c0e4152c5fa97311c4f0ceeba8f3471c80f947ebc78dfe62aca396bd83b4e

  • SHA512

    6a9bd4107fe202bd2f2ea727c575592932903846e389aca0a70bdf9eafa6dbcc34223505670f6a9d36ac66c32ba6c4b5c11871288b8cc1d30eb53fb042313dc3

  • SSDEEP

    3072:iN6ZekwVJIlgps5q9Eb648qwlS/+TfQO45D6aw:pe9IB83ID52j

Score
7/10
persistence

Malware Config

Targets

    • Target

      348c0e4152c5fa97311c4f0ceeba8f3471c80f947ebc78dfe62aca396bd83b4e

    • Size

      143KB

    • MD5

      ea99aa4d2a21dc691976f30ee5eff8ac

    • SHA1

      ff883881ddffa6597a3b99a24a7ffedc54bad986

    • SHA256

      348c0e4152c5fa97311c4f0ceeba8f3471c80f947ebc78dfe62aca396bd83b4e

    • SHA512

      6a9bd4107fe202bd2f2ea727c575592932903846e389aca0a70bdf9eafa6dbcc34223505670f6a9d36ac66c32ba6c4b5c11871288b8cc1d30eb53fb042313dc3

    • SSDEEP

      3072:iN6ZekwVJIlgps5q9Eb648qwlS/+TfQO45D6aw:pe9IB83ID52j

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks