Overview

overview

8

Static

static

043c19ba93...72.exe

windows7-x64

8

043c19ba93...72.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    043c19ba93df6d1829f24a4db367665c3f0eba1f4455840cae5e58f22eb32472

  • Size

    46KB

  • Sample

    221202-v887gshf97

  • MD5

    1cee1c9d4be285071272e912bec87820

  • SHA1

    0648bf917e9dfc4441db391a7c0d12ffdb3537a1

  • SHA256

    043c19ba93df6d1829f24a4db367665c3f0eba1f4455840cae5e58f22eb32472

  • SHA512

    18462df299fb13ef958a6cccbd4c1ea0fc24b185acd0889e63b0e6d4bd23611b0376f5d91f1ca86a64a3eae1c48c9585fd0409a72f79df92524ec06313896dab

  • SSDEEP

    768:XmStz8u3WNVSQASDUrK9mT62kX5c1y6HvjHXcqvtG1ttF4L1j8WN40QOHCCjPka+:Pumr97zzifyIWNHCCrk

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      043c19ba93df6d1829f24a4db367665c3f0eba1f4455840cae5e58f22eb32472

    • Size

      46KB

    • MD5

      1cee1c9d4be285071272e912bec87820

    • SHA1

      0648bf917e9dfc4441db391a7c0d12ffdb3537a1

    • SHA256

      043c19ba93df6d1829f24a4db367665c3f0eba1f4455840cae5e58f22eb32472

    • SHA512

      18462df299fb13ef958a6cccbd4c1ea0fc24b185acd0889e63b0e6d4bd23611b0376f5d91f1ca86a64a3eae1c48c9585fd0409a72f79df92524ec06313896dab

    • SSDEEP

      768:XmStz8u3WNVSQASDUrK9mT62kX5c1y6HvjHXcqvtG1ttF4L1j8WN40QOHCCjPka+:Pumr97zzifyIWNHCCrk

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks