Overview

overview

7

Static

static

e4481e237e...ab.exe

windows7-x64

6

e4481e237e...ab.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e4481e237e5e939eb7ac0c27338affd890e1004efd8d16c90e6b63de717621ab

  • Size

    20KB

  • Sample

    221206-pedwlagb88

  • MD5

    ac3479343cbe5dec3ac928994a79bce3

  • SHA1

    9feb000023870c04176018865e569bd9335d09c7

  • SHA256

    e4481e237e5e939eb7ac0c27338affd890e1004efd8d16c90e6b63de717621ab

  • SHA512

    803430033c1c779c7b9c8b2073b96f65b13020d9c00e8b128e146d61821279d68f3d3092452ea96522b4f679d91dbdf5d1df3b195508da6b892e5e9cb536f57f

  • SSDEEP

    384:otLDJjLznoN2zN2mN2J8l6kWLQsrev6+QcbLTCibs9WdC3kUpgO:yVXS2J202iTmW6RH9L3kUpl

Score
7/10
persistence

Malware Config

Targets

    • Target

      e4481e237e5e939eb7ac0c27338affd890e1004efd8d16c90e6b63de717621ab

    • Size

      20KB

    • MD5

      ac3479343cbe5dec3ac928994a79bce3

    • SHA1

      9feb000023870c04176018865e569bd9335d09c7

    • SHA256

      e4481e237e5e939eb7ac0c27338affd890e1004efd8d16c90e6b63de717621ab

    • SHA512

      803430033c1c779c7b9c8b2073b96f65b13020d9c00e8b128e146d61821279d68f3d3092452ea96522b4f679d91dbdf5d1df3b195508da6b892e5e9cb536f57f

    • SSDEEP

      384:otLDJjLznoN2zN2mN2J8l6kWLQsrev6+QcbLTCibs9WdC3kUpgO:yVXS2J202iTmW6RH9L3kUpl

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks