Overview

overview

8

Static

static

bc05252886...1e.exe

windows7-x64

8

bc05252886...1e.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bc052528860ff8b5eaee9ea121c3d33caf9761c5ce37c08ecfb4cc52e89bc01e

  • Size

    380KB

  • Sample

    221202-1z2nyacf8z

  • MD5

    c8f4c696af0c998340a384d8d90516c1

  • SHA1

    2570914f352bd90ffc0c2f219710a373f288ec4b

  • SHA256

    bc052528860ff8b5eaee9ea121c3d33caf9761c5ce37c08ecfb4cc52e89bc01e

  • SHA512

    834160c261b8258cd5864f225538d08aaf4100e7e78faac3bb26b405c96accc7a20ee7e2cc16ee24027362aa7ffd067f47f019f70684cae61db9015ea617fb21

  • SSDEEP

    6144:tS/534CMGOopQe3wzYyZzhPH3ziHe+237Hc6PyLY7aQEwh9Nlb:4Q5tYyL3ziHe+Mzjd7aQEwh9Nt

Score
8/10
persistence

Malware Config

Targets

    • Target

      bc052528860ff8b5eaee9ea121c3d33caf9761c5ce37c08ecfb4cc52e89bc01e

    • Size

      380KB

    • MD5

      c8f4c696af0c998340a384d8d90516c1

    • SHA1

      2570914f352bd90ffc0c2f219710a373f288ec4b

    • SHA256

      bc052528860ff8b5eaee9ea121c3d33caf9761c5ce37c08ecfb4cc52e89bc01e

    • SHA512

      834160c261b8258cd5864f225538d08aaf4100e7e78faac3bb26b405c96accc7a20ee7e2cc16ee24027362aa7ffd067f47f019f70684cae61db9015ea617fb21

    • SSDEEP

      6144:tS/534CMGOopQe3wzYyZzhPH3ziHe+237Hc6PyLY7aQEwh9Nlb:4Q5tYyL3ziHe+Mzjd7aQEwh9Nt

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks