Overview

overview

8

Static

static

6059819cbb...88.exe

windows7-x64

8

6059819cbb...88.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6059819cbbef9b02dc164210e2fbfaff04ecfcb9a923a5b750c8ffc0c409c788

  • Size

    500KB

  • Sample

    221201-3fpalsbh39

  • MD5

    eb7963c1046d089525b56ba7531d41f3

  • SHA1

    56a2e1c147f863518565d4ad83ee1b4078e35251

  • SHA256

    6059819cbbef9b02dc164210e2fbfaff04ecfcb9a923a5b750c8ffc0c409c788

  • SHA512

    bdb4e2140fdb47e2a277727005430638c41ca341fbd887bfd149cbb0b8f94cdeedceb628c46a02d0bfb3d6e371ebade26c4da8b0ecb158f40c9156a54d85b75f

  • SSDEEP

    3072:3UXHF76NAzdG6slPV6v1vbpPaJx+NupzWP8OwtVRAi44g:W7VKAdbpaCjkmiK

Score
8/10
persistence

Malware Config

Targets

    • Target

      6059819cbbef9b02dc164210e2fbfaff04ecfcb9a923a5b750c8ffc0c409c788

    • Size

      500KB

    • MD5

      eb7963c1046d089525b56ba7531d41f3

    • SHA1

      56a2e1c147f863518565d4ad83ee1b4078e35251

    • SHA256

      6059819cbbef9b02dc164210e2fbfaff04ecfcb9a923a5b750c8ffc0c409c788

    • SHA512

      bdb4e2140fdb47e2a277727005430638c41ca341fbd887bfd149cbb0b8f94cdeedceb628c46a02d0bfb3d6e371ebade26c4da8b0ecb158f40c9156a54d85b75f

    • SSDEEP

      3072:3UXHF76NAzdG6slPV6v1vbpPaJx+NupzWP8OwtVRAi44g:W7VKAdbpaCjkmiK

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks