Overview

overview

8

Static

static

269ab03e40...36.exe

windows7-x64

8

269ab03e40...36.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    269ab03e40c269c540678a1c2bedd553a90c4a0ca8117967a6ab6494edc1a736

  • Size

    3.5MB

  • Sample

    221127-prhejscb7w

  • MD5

    6adb0844ef816e6c387c4ea106a27592

  • SHA1

    e96d8e3c8a4a7026c6775ff7aedd0d0b1dffe20f

  • SHA256

    269ab03e40c269c540678a1c2bedd553a90c4a0ca8117967a6ab6494edc1a736

  • SHA512

    79f0652f1d5986b30a716a6309d26b72cd3317c75dcc7e5556648ca2e1aedf8b3e8f8629ad5ae0f4d6ac7202762463d9c7c2a0707a968658226d13612c0ef9ac

  • SSDEEP

    49152:F5vleLEv0Lnt2OD9NHBu0KgoqAcpxWN5xHawdRqpJTK5Aj3We/ZSMTwwTF2:FEo0rwOBUgoJcmNWwdRqXB3P/8fwT8

Score
8/10
discovery

Malware Config

Targets

    • Target

      269ab03e40c269c540678a1c2bedd553a90c4a0ca8117967a6ab6494edc1a736

    • Size

      3.5MB

    • MD5

      6adb0844ef816e6c387c4ea106a27592

    • SHA1

      e96d8e3c8a4a7026c6775ff7aedd0d0b1dffe20f

    • SHA256

      269ab03e40c269c540678a1c2bedd553a90c4a0ca8117967a6ab6494edc1a736

    • SHA512

      79f0652f1d5986b30a716a6309d26b72cd3317c75dcc7e5556648ca2e1aedf8b3e8f8629ad5ae0f4d6ac7202762463d9c7c2a0707a968658226d13612c0ef9ac

    • SSDEEP

      49152:F5vleLEv0Lnt2OD9NHBu0KgoqAcpxWN5xHawdRqpJTK5Aj3We/ZSMTwwTF2:FEo0rwOBUgoJcmNWwdRqXB3P/8fwT8

    Score
    8/10
    discovery

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks