Overview

overview

8

Static

static

c30e9f8272...86.exe

windows7-x64

8

c30e9f8272...86.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c30e9f8272d0ad84ce2ce3bb6179e77af0e7e086

  • Size

    449KB

  • Sample

    230111-qg8z7agf2v

  • MD5

    ad8256cb4be1b817a6df0726f8cdee0f

  • SHA1

    c30e9f8272d0ad84ce2ce3bb6179e77af0e7e086

  • SHA256

    65c9f0517f21362d05bbc7361cf2fa89ae13933ac6f5d1c2092fff55795c20f3

  • SHA512

    5bbafeeb2fa046b9330268258e3bba987a7d270e3ce28d798db271e01e9ae663419a8fcab723c62d03c6d828ca7a61877efbadad71d3e454adc2ae95fff79593

  • SSDEEP

    6144:SYa6VqwZutS+e5zeoD4P4uEhgVZx8Yr/V3qCSoC/LAIkmiFTo+mo:SY3tutXe5DD4PjogVP8sqC5CDqFEm

Score
8/10

Malware Config

Targets

    • Target

      c30e9f8272d0ad84ce2ce3bb6179e77af0e7e086

    • Size

      449KB

    • MD5

      ad8256cb4be1b817a6df0726f8cdee0f

    • SHA1

      c30e9f8272d0ad84ce2ce3bb6179e77af0e7e086

    • SHA256

      65c9f0517f21362d05bbc7361cf2fa89ae13933ac6f5d1c2092fff55795c20f3

    • SHA512

      5bbafeeb2fa046b9330268258e3bba987a7d270e3ce28d798db271e01e9ae663419a8fcab723c62d03c6d828ca7a61877efbadad71d3e454adc2ae95fff79593

    • SSDEEP

      6144:SYa6VqwZutS+e5zeoD4P4uEhgVZx8Yr/V3qCSoC/LAIkmiFTo+mo:SY3tutXe5DD4PjogVP8sqC5CDqFEm

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks