Overview

overview

8

Static

static

d0e30875a9...95.exe

windows7-x64

8

d0e30875a9...95.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    d0e30875a90aa8298b7028ed269ef545fe769dd315027f379dd2199c10ea5395

  • Size

    304KB

  • Sample

    221206-2d8e2aac36

  • MD5

    8b4b1dab45007aae6643dce2c2830bef

  • SHA1

    39efc785104757fe511bfdc070d84631ce5b1a75

  • SHA256

    d0e30875a90aa8298b7028ed269ef545fe769dd315027f379dd2199c10ea5395

  • SHA512

    a97e96ebb56a248e0c0a6fcee766dcc6cd82b21c4d2c26e1903ed8a777be33bcab0e155b9f9c835b899113507c1c90d1da6c402e5f93b386b397130e489885b0

  • SSDEEP

    6144:W9P+Wn5YoNhlukGg8AdiJqTh1s5AMXDHl5K3jRrwpN:uPWkdVY6e7zHjK31+N

Score
8/10

Malware Config

Targets

    • Target

      d0e30875a90aa8298b7028ed269ef545fe769dd315027f379dd2199c10ea5395

    • Size

      304KB

    • MD5

      8b4b1dab45007aae6643dce2c2830bef

    • SHA1

      39efc785104757fe511bfdc070d84631ce5b1a75

    • SHA256

      d0e30875a90aa8298b7028ed269ef545fe769dd315027f379dd2199c10ea5395

    • SHA512

      a97e96ebb56a248e0c0a6fcee766dcc6cd82b21c4d2c26e1903ed8a777be33bcab0e155b9f9c835b899113507c1c90d1da6c402e5f93b386b397130e489885b0

    • SSDEEP

      6144:W9P+Wn5YoNhlukGg8AdiJqTh1s5AMXDHl5K3jRrwpN:uPWkdVY6e7zHjK31+N

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks