Overview

overview

8

Static

static

867dc4acf9...c2.exe

windows7-x64

8

867dc4acf9...c2.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    867dc4acf92d0d3b6c2b11dd079fb0ec48f1b80a13fcd48e56c52eba700960c2

  • Size

    99KB

  • Sample

    221202-2xnvqsce42

  • MD5

    6751c3749a8ecb32cd74b2be9d5c0e87

  • SHA1

    1144409162560415e26ac10be4821c85ccac1b72

  • SHA256

    867dc4acf92d0d3b6c2b11dd079fb0ec48f1b80a13fcd48e56c52eba700960c2

  • SHA512

    d829bc8163d26da451e660e064669cd277a3e658a8055551a96390271a881944fb639ab923192cff057dc9ac261b5a056ae6d9306a20a186b07167bb850a6013

  • SSDEEP

    1536:ItSARwZNGJwWoOmL+EMMjU5vLOcYYmb1Pc7PhL8AncB/ry+FuU7AL+EMMjU5vLOo:ItvRw7MwWoOQ/ry+0U6QD

Score
8/10
persistence

Malware Config

Targets

    • Target

      867dc4acf92d0d3b6c2b11dd079fb0ec48f1b80a13fcd48e56c52eba700960c2

    • Size

      99KB

    • MD5

      6751c3749a8ecb32cd74b2be9d5c0e87

    • SHA1

      1144409162560415e26ac10be4821c85ccac1b72

    • SHA256

      867dc4acf92d0d3b6c2b11dd079fb0ec48f1b80a13fcd48e56c52eba700960c2

    • SHA512

      d829bc8163d26da451e660e064669cd277a3e658a8055551a96390271a881944fb639ab923192cff057dc9ac261b5a056ae6d9306a20a186b07167bb850a6013

    • SSDEEP

      1536:ItSARwZNGJwWoOmL+EMMjU5vLOcYYmb1Pc7PhL8AncB/ry+FuU7AL+EMMjU5vLOo:ItvRw7MwWoOQ/ry+0U6QD

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks