Overview

overview

8

Static

static

af892103f4...ac.exe

windows7-x64

8

af892103f4...ac.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    af892103f496117dfe79ef77032278c211d5837a178884ef23a1b71f09fa3dac

  • Size

    184KB

  • Sample

    221204-lrxyfscb2s

  • MD5

    85205eec1a4b392d032396cbb49a52da

  • SHA1

    de415c1703b62e4547be23fd534fe2cc4f1e376f

  • SHA256

    af892103f496117dfe79ef77032278c211d5837a178884ef23a1b71f09fa3dac

  • SHA512

    dab5790a2a0e93a86bd50b4974ad538714caa241f012275b2f7844b93d7a62e765dba303209bd65cb8d13320505d439bc90c4f0c27a85a13f41317d6cff6883f

  • SSDEEP

    3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3kK:/7BSH8zUB+nGESaaRvoB7FJNndnQ

Score
8/10

Malware Config

Targets

    • Target

      af892103f496117dfe79ef77032278c211d5837a178884ef23a1b71f09fa3dac

    • Size

      184KB

    • MD5

      85205eec1a4b392d032396cbb49a52da

    • SHA1

      de415c1703b62e4547be23fd534fe2cc4f1e376f

    • SHA256

      af892103f496117dfe79ef77032278c211d5837a178884ef23a1b71f09fa3dac

    • SHA512

      dab5790a2a0e93a86bd50b4974ad538714caa241f012275b2f7844b93d7a62e765dba303209bd65cb8d13320505d439bc90c4f0c27a85a13f41317d6cff6883f

    • SSDEEP

      3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3kK:/7BSH8zUB+nGESaaRvoB7FJNndnQ

    Score
    8/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks