Overview

overview

8

Static

static

c948e32b13...e1.exe

windows7-x64

8

c948e32b13...e1.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    c948e32b13a891314dfb2a3bc1c150ccab0db6ae9c592dc6262cdb9a9eab03e1

  • Size

    138KB

  • Sample

    221205-gq8aksbh86

  • MD5

    6521b772a1605d9b260e5b50cad1204a

  • SHA1

    d53affad2db417c34b580700e216420af359b846

  • SHA256

    c948e32b13a891314dfb2a3bc1c150ccab0db6ae9c592dc6262cdb9a9eab03e1

  • SHA512

    ff780d5f4c540c109548983c137848410ee39bc2b39bf6507dd15520fd4964240ffe25d87e5def51da808922f125e4d5b42fb855e1d79805b024067e9a2c8735

  • SSDEEP

    1536:6O9i/m6lPZCn5fiDe3rRZIrFUM8OWBro6R/02rd9cqCmh6DY5atOXPQq2dek0b7+:6OwEn5fiaf2wo6R/0SJV72dIbC

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      c948e32b13a891314dfb2a3bc1c150ccab0db6ae9c592dc6262cdb9a9eab03e1

    • Size

      138KB

    • MD5

      6521b772a1605d9b260e5b50cad1204a

    • SHA1

      d53affad2db417c34b580700e216420af359b846

    • SHA256

      c948e32b13a891314dfb2a3bc1c150ccab0db6ae9c592dc6262cdb9a9eab03e1

    • SHA512

      ff780d5f4c540c109548983c137848410ee39bc2b39bf6507dd15520fd4964240ffe25d87e5def51da808922f125e4d5b42fb855e1d79805b024067e9a2c8735

    • SSDEEP

      1536:6O9i/m6lPZCn5fiDe3rRZIrFUM8OWBro6R/02rd9cqCmh6DY5atOXPQq2dek0b7+:6OwEn5fiaf2wo6R/0SJV72dIbC

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Stops running service(s)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks