Overview

overview

8

Static

static

343c85d655...b7.exe

windows7-x64

8

343c85d655...b7.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    343c85d655b5d02bd32c8bf15f9d4859939934ce487515dd39b43198a22b36b7

  • Size

    187KB

  • Sample

    221203-1tjk6shb27

  • MD5

    8e6c65344e0d435d9527c58d11a51e3b

  • SHA1

    512349d2407f87c0b2e25707486bf07a2e07509a

  • SHA256

    343c85d655b5d02bd32c8bf15f9d4859939934ce487515dd39b43198a22b36b7

  • SHA512

    08b7904c1dd8feade3fd9e7f2778fa09275daa2bbada5c6cffc4a16c711710b94aa711f87f3f1edf207d1913acf96fa90b38c24b1d94dc61141568d373b35f4f

  • SSDEEP

    3072:MKnE/XpRhMk9mYQKm7b5fhcF0zBEs5pJ5LRmSTOzhkFE8en92yZum5yqYia0DsYL:WHN9mV91hTqQDTOzgs2y35yqYPKL

Score
8/10
persistence

Malware Config

Targets

    • Target

      343c85d655b5d02bd32c8bf15f9d4859939934ce487515dd39b43198a22b36b7

    • Size

      187KB

    • MD5

      8e6c65344e0d435d9527c58d11a51e3b

    • SHA1

      512349d2407f87c0b2e25707486bf07a2e07509a

    • SHA256

      343c85d655b5d02bd32c8bf15f9d4859939934ce487515dd39b43198a22b36b7

    • SHA512

      08b7904c1dd8feade3fd9e7f2778fa09275daa2bbada5c6cffc4a16c711710b94aa711f87f3f1edf207d1913acf96fa90b38c24b1d94dc61141568d373b35f4f

    • SSDEEP

      3072:MKnE/XpRhMk9mYQKm7b5fhcF0zBEs5pJ5LRmSTOzhkFE8en92yZum5yqYia0DsYL:WHN9mV91hTqQDTOzgs2y35yqYPKL

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks