Overview

overview

8

Static

static

c2c81e8a3d...c2.exe

windows7-x64

8

c2c81e8a3d...c2.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c2c81e8a3d07ffa15b4f66bbfdf248198b6e6d5147d5f1cc756faba4156a9fc2

  • Size

    264KB

  • Sample

    221203-gd5zpadb6y

  • MD5

    ec6e8bcdb09693d1b3e1ebf903167d53

  • SHA1

    04c01d906cd17b76eee88823974891dd85d22836

  • SHA256

    c2c81e8a3d07ffa15b4f66bbfdf248198b6e6d5147d5f1cc756faba4156a9fc2

  • SHA512

    d2b8715de945fa9dbdd5be89fa1d367c9dcc0eab6bfe595ad118aaf50d8e8827a4091c541675b2e1a5c7176afa927cce62d1267e1f0e4718c67c961bc6342396

  • SSDEEP

    6144:oGIqBgwIPbDxXB7y1IFYj0hsEcHxGdAy13Uf84:TBg9j/TsEcHcdAC3Uf84

Score
8/10
persistence

Malware Config

Targets

    • Target

      c2c81e8a3d07ffa15b4f66bbfdf248198b6e6d5147d5f1cc756faba4156a9fc2

    • Size

      264KB

    • MD5

      ec6e8bcdb09693d1b3e1ebf903167d53

    • SHA1

      04c01d906cd17b76eee88823974891dd85d22836

    • SHA256

      c2c81e8a3d07ffa15b4f66bbfdf248198b6e6d5147d5f1cc756faba4156a9fc2

    • SHA512

      d2b8715de945fa9dbdd5be89fa1d367c9dcc0eab6bfe595ad118aaf50d8e8827a4091c541675b2e1a5c7176afa927cce62d1267e1f0e4718c67c961bc6342396

    • SSDEEP

      6144:oGIqBgwIPbDxXB7y1IFYj0hsEcHxGdAy13Uf84:TBg9j/TsEcHcdAC3Uf84

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks