Overview

overview

8

Static

static

305b2adb1f...4f.exe

windows7-x64

8

305b2adb1f...4f.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    305b2adb1f996316ce4493c724151d23ad1419b13ca0594c931bd64769f2004f

  • Size

    110KB

  • Sample

    221129-l19cvahb97

  • MD5

    249b082c5c864e497bc8fe3e122f3fd0

  • SHA1

    244b0104a4541e81d50e871cff7a9e0bc9996662

  • SHA256

    305b2adb1f996316ce4493c724151d23ad1419b13ca0594c931bd64769f2004f

  • SHA512

    4491758cdd9acbaea2c7567c1b75b981f3c842441e36ab7cf0d92a80a01d68846ccef14e92f07c69affb2204f29bd2fa9fedb8cae04646a4aac9c2d7a0a56573

  • SSDEEP

    1536:3zQMWNQtkYj5Yc19lJnS5dByNLcM2qihl9VlCAhHCtRKPq2:36ut+c1XJSHByN4kihl99hit

Score
8/10
discoveryexploit

Malware Config

Targets

    • Target

      305b2adb1f996316ce4493c724151d23ad1419b13ca0594c931bd64769f2004f

    • Size

      110KB

    • MD5

      249b082c5c864e497bc8fe3e122f3fd0

    • SHA1

      244b0104a4541e81d50e871cff7a9e0bc9996662

    • SHA256

      305b2adb1f996316ce4493c724151d23ad1419b13ca0594c931bd64769f2004f

    • SHA512

      4491758cdd9acbaea2c7567c1b75b981f3c842441e36ab7cf0d92a80a01d68846ccef14e92f07c69affb2204f29bd2fa9fedb8cae04646a4aac9c2d7a0a56573

    • SSDEEP

      1536:3zQMWNQtkYj5Yc19lJnS5dByNLcM2qihl9VlCAhHCtRKPq2:36ut+c1XJSHByN4kihl99hit

    Score
    8/10
    discoveryexploit

    • Possible privilege escalation attempt

      exploit

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File Permissions Modification

1
T1222

Credential Access

Discovery

Query Registry

3
T1012

System Information Discovery

4
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks