Overview

overview

10

Static

static

10

b195c234eb...3f.exe

windows7-x64

8

b195c234eb...3f.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b195c234eb83913067eb2921077266a6cee5dacea08f8c8bbdcbdb635104043f

  • Size

    319KB

  • Sample

    221129-qycy3sdg54

  • MD5

    14b5838f141bb5106acd5a6b7f4e8f30

  • SHA1

    6bbfad3803cbc7c2ae32a7b449ac2cea022f48ab

  • SHA256

    b195c234eb83913067eb2921077266a6cee5dacea08f8c8bbdcbdb635104043f

  • SHA512

    c79da5a2a378a57135f1ac3fe6892f082c4b281c0124d2df0b1f019853b6e049203f83e67b5e4e4bbb8c13bb463c7fbc635f81f0dd25cf0c822d2571bda6c143

  • SSDEEP

    6144:f6zF1huD31TtVOQ7wf5zVu36xrRanr0WDfWN2S3zaEmgsj74:guD1Rdwf5zRkr0Wig7

Score
10/10
modiloader

Malware Config

Targets

    • Target

      b195c234eb83913067eb2921077266a6cee5dacea08f8c8bbdcbdb635104043f

    • Size

      319KB

    • MD5

      14b5838f141bb5106acd5a6b7f4e8f30

    • SHA1

      6bbfad3803cbc7c2ae32a7b449ac2cea022f48ab

    • SHA256

      b195c234eb83913067eb2921077266a6cee5dacea08f8c8bbdcbdb635104043f

    • SHA512

      c79da5a2a378a57135f1ac3fe6892f082c4b281c0124d2df0b1f019853b6e049203f83e67b5e4e4bbb8c13bb463c7fbc635f81f0dd25cf0c822d2571bda6c143

    • SSDEEP

      6144:f6zF1huD31TtVOQ7wf5zVu36xrRanr0WDfWN2S3zaEmgsj74:guD1Rdwf5zRkr0Wig7

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks