Overview

overview

8

Static

static

a1cf156033...2e.exe

windows7-x64

8

a1cf156033...2e.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    a1cf1560334f67612215951c13732bffb9cf5126dd296a3d7eff0d338215112e

  • Size

    115KB

  • Sample

    221201-mbnkhshc33

  • MD5

    9a3bb989b8cc002de1321f3c883abdee

  • SHA1

    4abdfe0f4bafae146939ced6842b6362eb57c8fd

  • SHA256

    a1cf1560334f67612215951c13732bffb9cf5126dd296a3d7eff0d338215112e

  • SHA512

    062aade15fdf16b01879e4ef2bbe3d95e309bd794293a845b41cb535eb57a7c0ec7325dc15027bac40074124cb450d9dc0f590a5793982fd09aca4f5316c8f33

  • SSDEEP

    3072:YT7zbuHLdpXnPsED9BMBwoU1DpG3x0I3jxXX2LHUhF:YT7OHTX0WveikdOI

Score
8/10
persistence

Malware Config

Targets

    • Target

      a1cf1560334f67612215951c13732bffb9cf5126dd296a3d7eff0d338215112e

    • Size

      115KB

    • MD5

      9a3bb989b8cc002de1321f3c883abdee

    • SHA1

      4abdfe0f4bafae146939ced6842b6362eb57c8fd

    • SHA256

      a1cf1560334f67612215951c13732bffb9cf5126dd296a3d7eff0d338215112e

    • SHA512

      062aade15fdf16b01879e4ef2bbe3d95e309bd794293a845b41cb535eb57a7c0ec7325dc15027bac40074124cb450d9dc0f590a5793982fd09aca4f5316c8f33

    • SSDEEP

      3072:YT7zbuHLdpXnPsED9BMBwoU1DpG3x0I3jxXX2LHUhF:YT7OHTX0WveikdOI

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks