Overview

overview

8

Static

static

be0bca2f2a...4b.exe

windows7-x64

8

be0bca2f2a...4b.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    be0bca2f2aadb6450a24fed93644c600832a1dfbcc14ac3d08c6073436b65c4b

  • Size

    123KB

  • Sample

    221203-r5jkwaaa44

  • MD5

    8a105d4d072da4e7e60b5d52e40dd1e4

  • SHA1

    75600781f3abd0e93b97caae3b3deac91c5d2e63

  • SHA256

    be0bca2f2aadb6450a24fed93644c600832a1dfbcc14ac3d08c6073436b65c4b

  • SHA512

    fd9f0f5ca3a6891e693b5bb114ad855d8be1b88813a6e47d2e19546d0fd7c37d50e19901ffe951cc6050f5d4747754b4e948196ba78f71f4b1dbfc9133529d7f

  • SSDEEP

    3072:DMEMvxdknmg1tDbuLB+5xGT21JqaEvNW41i/NU8bOMYcYYcmy5OJkHGGi:DME1nmg1tDbJ5621YNWWi/NjO5SJmi

Score
8/10

Malware Config

Targets

    • Target

      be0bca2f2aadb6450a24fed93644c600832a1dfbcc14ac3d08c6073436b65c4b

    • Size

      123KB

    • MD5

      8a105d4d072da4e7e60b5d52e40dd1e4

    • SHA1

      75600781f3abd0e93b97caae3b3deac91c5d2e63

    • SHA256

      be0bca2f2aadb6450a24fed93644c600832a1dfbcc14ac3d08c6073436b65c4b

    • SHA512

      fd9f0f5ca3a6891e693b5bb114ad855d8be1b88813a6e47d2e19546d0fd7c37d50e19901ffe951cc6050f5d4747754b4e948196ba78f71f4b1dbfc9133529d7f

    • SSDEEP

      3072:DMEMvxdknmg1tDbuLB+5xGT21JqaEvNW41i/NU8bOMYcYYcmy5OJkHGGi:DME1nmg1tDbJ5621YNWWi/NjO5SJmi

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks