Overview

overview

7

Static

static

1

7e191d505b...d9.exe

windows7-x64

7

7e191d505b...d9.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    34ff4702177d29e348ce63859888c59a.bin

  • Size

    579KB

  • Sample

    230308-bgnxpadc54

  • MD5

    490e48d91197f8a5ef8f603d7938fbdf

  • SHA1

    2c703056bb3c4b78fda235ba6a1a574f60a32a62

  • SHA256

    9b4f6c012a93351e2d22d536d4abd88e52991b3446c2cf1bbe562754be4fe554

  • SHA512

    2ef04cc563f8227c208016134123473c67d0a7b35c59ee6d7e0dd051dbc80dedef0960389c4041cc305d5a2019dd0b212b02673ab372cb1261001ddb921ec9df

  • SSDEEP

    12288:AYOmx7ABSqpwO88QlSqBWuG8e+axKQiOOakgO8mQcj43Qi0Y:Px7ABsO88QlGjmQHO8mQcs/

Score
7/10

Malware Config

Targets

    • Target

      7e191d505b6831c199a26648de080ba4f270dd27e99540ca7d86c4078112cad9.exe

    • Size

      765KB

    • MD5

      34ff4702177d29e348ce63859888c59a

    • SHA1

      be650e85fa9f9a3f0ea68efb60a0febb12fed9c4

    • SHA256

      7e191d505b6831c199a26648de080ba4f270dd27e99540ca7d86c4078112cad9

    • SHA512

      2532ac9d2f0e608d97b8e23065a12bf396906d4e79f25b41645c28c95b14471feb69435336f48d62f7280dbbc85092e1af12f34475c8ed2e431d06ad3db93a3b

    • SSDEEP

      12288:zfNCA+yfSIpGDnmBAjzcJFE6qC46A9jmP/uhu/yMS08CkntxYRlL:zfUAHwbmBKPfmP/UDMS08Ckn3k

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks