Overview

overview

7

Static

static

8661491ce0...80.exe

windows7-x64

5

8661491ce0...80.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8661491ce05e046b4ae5eb44741a4fd45f83cf151c0bfd841eb81ed3df5ea080

  • Size

    112KB

  • Sample

    221201-l8dwxagh57

  • MD5

    c336a98cfe4c5c0f8d104bdddd223d0f

  • SHA1

    3d3540fbf039b50d745522b47eb553fd59ed297c

  • SHA256

    8661491ce05e046b4ae5eb44741a4fd45f83cf151c0bfd841eb81ed3df5ea080

  • SHA512

    663bd4e1ac39e0f669be36336ffba8185569e87661059f469dcfc8141093d52e9d5b5a62d83629d312fa21a53958f466eb12382fd4dc72993b4e97c5e40ddfe2

  • SSDEEP

    1536:WcaKaorzIgzgZqwtqRHQIYiVEdf6zn2kVeV:WcaKFIxXyYiVEwn2kVe

Score
7/10
persistence

Malware Config

Targets

    • Target

      8661491ce05e046b4ae5eb44741a4fd45f83cf151c0bfd841eb81ed3df5ea080

    • Size

      112KB

    • MD5

      c336a98cfe4c5c0f8d104bdddd223d0f

    • SHA1

      3d3540fbf039b50d745522b47eb553fd59ed297c

    • SHA256

      8661491ce05e046b4ae5eb44741a4fd45f83cf151c0bfd841eb81ed3df5ea080

    • SHA512

      663bd4e1ac39e0f669be36336ffba8185569e87661059f469dcfc8141093d52e9d5b5a62d83629d312fa21a53958f466eb12382fd4dc72993b4e97c5e40ddfe2

    • SSDEEP

      1536:WcaKaorzIgzgZqwtqRHQIYiVEdf6zn2kVeV:WcaKFIxXyYiVEwn2kVe

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks