Overview

overview

7

Static

static

99c9c2a213...4f.exe

windows7-x64

6

99c9c2a213...4f.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    99c9c2a2130e830ec938e0a9feeb7f0423ad948ae6cfc8c813c3ea00ebc4844f

  • Size

    135KB

  • Sample

    221202-vye6nagg63

  • MD5

    bc9f39ee5787df23c3d2ecdd88a71bdd

  • SHA1

    814cce2ffc9d552559eb5ad36df8bc52010e18b5

  • SHA256

    99c9c2a2130e830ec938e0a9feeb7f0423ad948ae6cfc8c813c3ea00ebc4844f

  • SHA512

    d2d0903cd37e7edc391d5d654ea8ee592e749e7906fbed266ba24b3acbf07680fb5fb83aab54ec43f37c5b545e993225523b0da619b43ce048cdaa5134dc17b7

  • SSDEEP

    3072:uwxVMhOC/dTDbq91+mno3t4QZQ3rfvlJkJxFRaSG2yQ1:uTfFDbRnOTrf9J0S52F

Score
7/10
persistence

Malware Config

Targets

    • Target

      99c9c2a2130e830ec938e0a9feeb7f0423ad948ae6cfc8c813c3ea00ebc4844f

    • Size

      135KB

    • MD5

      bc9f39ee5787df23c3d2ecdd88a71bdd

    • SHA1

      814cce2ffc9d552559eb5ad36df8bc52010e18b5

    • SHA256

      99c9c2a2130e830ec938e0a9feeb7f0423ad948ae6cfc8c813c3ea00ebc4844f

    • SHA512

      d2d0903cd37e7edc391d5d654ea8ee592e749e7906fbed266ba24b3acbf07680fb5fb83aab54ec43f37c5b545e993225523b0da619b43ce048cdaa5134dc17b7

    • SSDEEP

      3072:uwxVMhOC/dTDbq91+mno3t4QZQ3rfvlJkJxFRaSG2yQ1:uTfFDbRnOTrf9J0S52F

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks