Overview

overview

8

Static

static

9528e9e4d8...92.exe

windows7-x64

8

9528e9e4d8...92.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    9528e9e4d8eaddd5adca90e32e85b8c3bde7c8132ac995960462c4244cc72d92

  • Size

    361KB

  • Sample

    221204-hah67ahg6w

  • MD5

    600d12fdc49996c3233d903267b8ad9c

  • SHA1

    78244af8f58f4e8f12fdb354282c23fd49af02b0

  • SHA256

    9528e9e4d8eaddd5adca90e32e85b8c3bde7c8132ac995960462c4244cc72d92

  • SHA512

    b623749065f26d2cdd36dad7055c301ee475e8ac498f449a04cba995882687feaa9a6dac360c9f0e9dbf9ff6abbb820004f52878e35f6eea75fd46b401857eb0

  • SSDEEP

    3072:+WzhM5bTxz1xU0QDJz9dMbp4TC5J305Gquhh20Di4m3YPP8e7xKh/9nKq8SE9Y0F:+WlMpTJ40AVYJ2u32z8P8ei0

Score
8/10

Malware Config

Targets

    • Target

      9528e9e4d8eaddd5adca90e32e85b8c3bde7c8132ac995960462c4244cc72d92

    • Size

      361KB

    • MD5

      600d12fdc49996c3233d903267b8ad9c

    • SHA1

      78244af8f58f4e8f12fdb354282c23fd49af02b0

    • SHA256

      9528e9e4d8eaddd5adca90e32e85b8c3bde7c8132ac995960462c4244cc72d92

    • SHA512

      b623749065f26d2cdd36dad7055c301ee475e8ac498f449a04cba995882687feaa9a6dac360c9f0e9dbf9ff6abbb820004f52878e35f6eea75fd46b401857eb0

    • SSDEEP

      3072:+WzhM5bTxz1xU0QDJz9dMbp4TC5J305Gquhh20Di4m3YPP8e7xKh/9nKq8SE9Y0F:+WlMpTJ40AVYJ2u32z8P8ei0

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks