Overview

overview

8

Static

static

b320829f85...63.exe

windows7-x64

8

b320829f85...63.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    b320829f85280d1cbd6f5beee12e7f608770f9cbf444fd75cefce0de84adcb63

  • Size

    247KB

  • Sample

    221203-esl41sdc33

  • MD5

    3e1b481f46583e55fabf462bdb916994

  • SHA1

    33f689aa06830774de2a1a40f1d75e52d14f108a

  • SHA256

    b320829f85280d1cbd6f5beee12e7f608770f9cbf444fd75cefce0de84adcb63

  • SHA512

    cf525c4a5f90931640bb7b0f06f9e898a34977e9bd64d12002943ce62b0a0e41a5c414eec4154bfc7d59a5f9a965e1b8e2b6db567730180366a32d8a2fac7781

  • SSDEEP

    6144:BHeZy02lh5aa4F+Vwa8KcZhFGEIViqY9xtKKNU6I/Oeutl:Ea+lF+VwKcsiN9Ls2

Score
8/10

Malware Config

Targets

    • Target

      b320829f85280d1cbd6f5beee12e7f608770f9cbf444fd75cefce0de84adcb63

    • Size

      247KB

    • MD5

      3e1b481f46583e55fabf462bdb916994

    • SHA1

      33f689aa06830774de2a1a40f1d75e52d14f108a

    • SHA256

      b320829f85280d1cbd6f5beee12e7f608770f9cbf444fd75cefce0de84adcb63

    • SHA512

      cf525c4a5f90931640bb7b0f06f9e898a34977e9bd64d12002943ce62b0a0e41a5c414eec4154bfc7d59a5f9a965e1b8e2b6db567730180366a32d8a2fac7781

    • SSDEEP

      6144:BHeZy02lh5aa4F+Vwa8KcZhFGEIViqY9xtKKNU6I/Oeutl:Ea+lF+VwKcsiN9Ls2

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks