Overview

overview

8

Static

static

6dbc287963...56.exe

windows7-x64

8

6dbc287963...56.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    6dbc2879636d206c573afaeb24db157f303a649e4a75bb1db1e42156e30ee756

  • Size

    238KB

  • Sample

    221129-smk7eseb4x

  • MD5

    0b3b30f71ac6304b593d8889faebfff4

  • SHA1

    ac1fa0fdae5670e684e41806ce0fa97749ef7c29

  • SHA256

    6dbc2879636d206c573afaeb24db157f303a649e4a75bb1db1e42156e30ee756

  • SHA512

    a6e7b912bb9865e62bdd8cc4b0a398b25422b27d67315dcee05014991cd6bb9785bbadf6aa5355d53877161411256948a498da35a55ca07c3c9f7be078ebeafa

  • SSDEEP

    6144:EZuuObR8sVImcyYEdJgoETWv7YISq3H+BlUufK:jV+mz/Eiv7YIH3eHtfK

Score
8/10
persistence

Malware Config

Targets

    • Target

      6dbc2879636d206c573afaeb24db157f303a649e4a75bb1db1e42156e30ee756

    • Size

      238KB

    • MD5

      0b3b30f71ac6304b593d8889faebfff4

    • SHA1

      ac1fa0fdae5670e684e41806ce0fa97749ef7c29

    • SHA256

      6dbc2879636d206c573afaeb24db157f303a649e4a75bb1db1e42156e30ee756

    • SHA512

      a6e7b912bb9865e62bdd8cc4b0a398b25422b27d67315dcee05014991cd6bb9785bbadf6aa5355d53877161411256948a498da35a55ca07c3c9f7be078ebeafa

    • SSDEEP

      6144:EZuuObR8sVImcyYEdJgoETWv7YISq3H+BlUufK:jV+mz/Eiv7YIH3eHtfK

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks