Overview

overview

8

Static

static

7454c5dbf7...f3.exe

windows7-x64

8

7454c5dbf7...f3.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7454c5dbf7d10211efdda54f1f969e9333214c2efcc771d8969a0603911176f3

  • Size

    335KB

  • Sample

    221205-qwy4jaeb94

  • MD5

    0bd15ef438135143ca30d208a2f36120

  • SHA1

    daa7f16f84d97413fdc60f5be9ee6814ede9f4dc

  • SHA256

    7454c5dbf7d10211efdda54f1f969e9333214c2efcc771d8969a0603911176f3

  • SHA512

    a935474c9976fec6a998466ec553377fbfeff885cecc4331939ff9ca54e30758b1791d0978a8926e0b41c92f368db8c2c774a96085a12286738dd6412ddf22a4

  • SSDEEP

    6144:sz+92mhAMJ/cPl3ircKbEJCI94xuy4EMMGYUlVj8xkRfVGDnz/lDdEYar:sK2mhAMJ/cPllyEsI+x0YUjwxQSz9ZI

Score
8/10
persistence

Malware Config

Targets

    • Target

      7454c5dbf7d10211efdda54f1f969e9333214c2efcc771d8969a0603911176f3

    • Size

      335KB

    • MD5

      0bd15ef438135143ca30d208a2f36120

    • SHA1

      daa7f16f84d97413fdc60f5be9ee6814ede9f4dc

    • SHA256

      7454c5dbf7d10211efdda54f1f969e9333214c2efcc771d8969a0603911176f3

    • SHA512

      a935474c9976fec6a998466ec553377fbfeff885cecc4331939ff9ca54e30758b1791d0978a8926e0b41c92f368db8c2c774a96085a12286738dd6412ddf22a4

    • SSDEEP

      6144:sz+92mhAMJ/cPl3ircKbEJCI94xuy4EMMGYUlVj8xkRfVGDnz/lDdEYar:sK2mhAMJ/cPllyEsI+x0YUjwxQSz9ZI

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Modifies AppInit DLL entries

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks