Overview

overview

8

Static

static

dc7b82e294...d9.exe

windows7-x64

8

dc7b82e294...d9.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc7b82e29450c6593925a469e8b4021d386c8b50a363e413c91d9d3a18dc5fd9

  • Size

    5.5MB

  • Sample

    221128-t19ydahc26

  • MD5

    9c3901f10998c40021f36d407a87c31a

  • SHA1

    b4f433c15c722bd9485d609bf5d93790369ad853

  • SHA256

    dc7b82e29450c6593925a469e8b4021d386c8b50a363e413c91d9d3a18dc5fd9

  • SHA512

    cd6fa94fef2dbcfa7e4a70b680c7321139c4814f5244d4a70ddbb4dced020f3787e409dfae9017e3cf37e760c7ff0ca0de5060d39b5712546580a3c8f8a6ee7c

  • SSDEEP

    98304:+1wWJq72sVxUybf5zSbJM+fmbFOb/2r3CgPTv4WWA7d7TuMSMGzbftvJJvw+kNGq:soVxNF82rHTv4E2zbftXwvGq

Score
8/10
discoveryexploit

Malware Config

Targets

    • Target

      dc7b82e29450c6593925a469e8b4021d386c8b50a363e413c91d9d3a18dc5fd9

    • Size

      5.5MB

    • MD5

      9c3901f10998c40021f36d407a87c31a

    • SHA1

      b4f433c15c722bd9485d609bf5d93790369ad853

    • SHA256

      dc7b82e29450c6593925a469e8b4021d386c8b50a363e413c91d9d3a18dc5fd9

    • SHA512

      cd6fa94fef2dbcfa7e4a70b680c7321139c4814f5244d4a70ddbb4dced020f3787e409dfae9017e3cf37e760c7ff0ca0de5060d39b5712546580a3c8f8a6ee7c

    • SSDEEP

      98304:+1wWJq72sVxUybf5zSbJM+fmbFOb/2r3CgPTv4WWA7d7TuMSMGzbftvJJvw+kNGq:soVxNF82rHTv4E2zbftXwvGq

    Score
    8/10
    discoveryexploit

    • Executes dropped EXE

    • Possible privilege escalation attempt

      exploit

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File Permissions Modification

1
T1222

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks