Overview

overview

7

Static

static

6be7871b1a...90.exe

windows7-x64

6

6be7871b1a...90.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    6be7871b1acc611b7703d1c0441e1cefb0024a5cde20bbcf9406fd8296e3b690

  • Size

    1.5MB

  • Sample

    230112-x7vc2sab53

  • MD5

    174800448060da1f551c0e234d0337f6

  • SHA1

    5c395ac0840c2abba7e18afa1080b22a8bfc5d12

  • SHA256

    6be7871b1acc611b7703d1c0441e1cefb0024a5cde20bbcf9406fd8296e3b690

  • SHA512

    0ff91582a3d89ba03f76ca845aec9dfd540d17d9f34a5935b71a947e89e716f9cb3af2e8302bad68be48a6644b7ac4812945759134fcf17bc3d196b70d83ca2a

  • SSDEEP

    24576:bOi2Q9NXw2/wPOjdGxYqfw+Jwz/S/6RZs8nVW6k5JHkARt7DBAqnN:bZTq24GjdGSgw+W7SCRnVQTEQ/BA8

Score
7/10

Malware Config

Targets

    • Target

      6be7871b1acc611b7703d1c0441e1cefb0024a5cde20bbcf9406fd8296e3b690

    • Size

      1.5MB

    • MD5

      174800448060da1f551c0e234d0337f6

    • SHA1

      5c395ac0840c2abba7e18afa1080b22a8bfc5d12

    • SHA256

      6be7871b1acc611b7703d1c0441e1cefb0024a5cde20bbcf9406fd8296e3b690

    • SHA512

      0ff91582a3d89ba03f76ca845aec9dfd540d17d9f34a5935b71a947e89e716f9cb3af2e8302bad68be48a6644b7ac4812945759134fcf17bc3d196b70d83ca2a

    • SSDEEP

      24576:bOi2Q9NXw2/wPOjdGxYqfw+Jwz/S/6RZs8nVW6k5JHkARt7DBAqnN:bZTq24GjdGSgw+W7SCRnVQTEQ/BA8

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks