Overview

overview

8

Static

static

fc5b24f3de...a6.exe

windows7-x64

8

fc5b24f3de...a6.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    fc5b24f3de2108e94d3b7103f31cbf4607358625a1e836b5b472bcd064c9c4a6

  • Size

    11KB

  • Sample

    221204-c7mmzsea6w

  • MD5

    73a906234f74026f30897fc291e270f0

  • SHA1

    f86253f272089269e2bc569d63246e12992e754b

  • SHA256

    fc5b24f3de2108e94d3b7103f31cbf4607358625a1e836b5b472bcd064c9c4a6

  • SHA512

    d0dbae34800bfbf281ca5c4b624697597576ab47940daa26246e5d488ec5fbb22ce4cc0cabc382c7fa662af0112ff8ae04df836c6b40f36fe16c2b81d8c89cb3

  • SSDEEP

    192:B0dK4TA90YN2aqXzQ1bC9WP5BIRJMgwrSPYjXidSx7cu24ap:BDyYN6XzQ5jBgdeidSx7ZDY

Score
8/10
persistence

Malware Config

Targets

    • Target

      fc5b24f3de2108e94d3b7103f31cbf4607358625a1e836b5b472bcd064c9c4a6

    • Size

      11KB

    • MD5

      73a906234f74026f30897fc291e270f0

    • SHA1

      f86253f272089269e2bc569d63246e12992e754b

    • SHA256

      fc5b24f3de2108e94d3b7103f31cbf4607358625a1e836b5b472bcd064c9c4a6

    • SHA512

      d0dbae34800bfbf281ca5c4b624697597576ab47940daa26246e5d488ec5fbb22ce4cc0cabc382c7fa662af0112ff8ae04df836c6b40f36fe16c2b81d8c89cb3

    • SSDEEP

      192:B0dK4TA90YN2aqXzQ1bC9WP5BIRJMgwrSPYjXidSx7cu24ap:BDyYN6XzQ5jBgdeidSx7ZDY

    Score
    8/10
    persistence

    • Drops file in Drivers directory

    • Sets DLL path for service in the registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks