Overview

overview

8

Static

static

98f4328ad3...4b.exe

windows7-x64

8

98f4328ad3...4b.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    98f4328ad3eedc4e5e78b426065dc9d8c17e173213d393ea3580d11c87c7a64b

  • Size

    176KB

  • Sample

    221201-hytmtsaa5z

  • MD5

    8d31df13ee0a53951186f7623aec8bde

  • SHA1

    dfcac02c889a624df5a02856a7c816e59cba2e02

  • SHA256

    98f4328ad3eedc4e5e78b426065dc9d8c17e173213d393ea3580d11c87c7a64b

  • SHA512

    4d88c111c580c2996e1cb61859ec61447ebe2631f8794d5b26e5862e449c0f9be7c70d209e70858be820678c204598717831349324e0b58f63dd670bb4fcd3a7

  • SSDEEP

    3072:LLIVdnMWqZxKDVb9PQesPOe83fwgFqpqfYTWBdz1QVt:LkAxIePWqQSW7Jo

Score
8/10
persistence

Malware Config

Targets

    • Target

      98f4328ad3eedc4e5e78b426065dc9d8c17e173213d393ea3580d11c87c7a64b

    • Size

      176KB

    • MD5

      8d31df13ee0a53951186f7623aec8bde

    • SHA1

      dfcac02c889a624df5a02856a7c816e59cba2e02

    • SHA256

      98f4328ad3eedc4e5e78b426065dc9d8c17e173213d393ea3580d11c87c7a64b

    • SHA512

      4d88c111c580c2996e1cb61859ec61447ebe2631f8794d5b26e5862e449c0f9be7c70d209e70858be820678c204598717831349324e0b58f63dd670bb4fcd3a7

    • SSDEEP

      3072:LLIVdnMWqZxKDVb9PQesPOe83fwgFqpqfYTWBdz1QVt:LkAxIePWqQSW7Jo

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks