Overview

overview

8

Static

static

81129c0892...5d.exe

windows7-x64

1

81129c0892...5d.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    81129c08926b2e144759baa3027dcb5b0e62f3394e4080a92517e7a862e06a5d

  • Size

    368KB

  • Sample

    221201-k6bs4agh51

  • MD5

    fb72660fab00712e1a1092ce96f5b6fc

  • SHA1

    8df156f1ee6dbc242efbe1ac754eb348833d0445

  • SHA256

    81129c08926b2e144759baa3027dcb5b0e62f3394e4080a92517e7a862e06a5d

  • SHA512

    0e6eaad443726f144136e1fe21253cdd432209c194507c7ce744e120404919d032bae037da58d0ff36340720c99d2a9a2b737258a8615c9ecbc5f1e9151cf1c6

  • SSDEEP

    6144:0ZYTS8j+47+rt/YfSX7yZCDXikhrX5l6okBQCFZYYhkFu9Xp/ZATYqoT73:jS3Y+rt/YKWiXvAhEa1ZA0qoTz

Score
8/10
persistence

Malware Config

Targets

    • Target

      81129c08926b2e144759baa3027dcb5b0e62f3394e4080a92517e7a862e06a5d

    • Size

      368KB

    • MD5

      fb72660fab00712e1a1092ce96f5b6fc

    • SHA1

      8df156f1ee6dbc242efbe1ac754eb348833d0445

    • SHA256

      81129c08926b2e144759baa3027dcb5b0e62f3394e4080a92517e7a862e06a5d

    • SHA512

      0e6eaad443726f144136e1fe21253cdd432209c194507c7ce744e120404919d032bae037da58d0ff36340720c99d2a9a2b737258a8615c9ecbc5f1e9151cf1c6

    • SSDEEP

      6144:0ZYTS8j+47+rt/YfSX7yZCDXikhrX5l6okBQCFZYYhkFu9Xp/ZATYqoT73:jS3Y+rt/YKWiXvAhEa1ZA0qoTz

    Score
    8/10
    persistence

    • Blocklisted process makes network request

    • Sets DLL path for service in the registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks