Overview

overview

7

Static

static

1

Clip1.exe

windows7-x64

7

Clip1.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Clip1.exe

  • Size

    11.2MB

  • Sample

    230309-j4aycabc86

  • MD5

    63b52dc8c2257b9eeef4957aaf041cbe

  • SHA1

    37f2315507ee443ea3893776bded235b3776fcb4

  • SHA256

    ba5ff1d9734c549d5df671c2891b58228054bc7689b91cf0b7b02e6e1a598139

  • SHA512

    99a028c18f543aa26a171f796f44c348c178158cb6e6d2125bdb7f385247d6952c143146e4f5fea2ceaee4690be0d1592639fa29c8ad3104ff2672bc5b0aea38

  • SSDEEP

    196608:kZXqP8ngnNj/Y3HJlCvIDlWFIgoGkNa6kGr4B1Ho/5EM5QRF9:8y1nNj/Y3HJs87AkNfkzohF5QRF9

Score
7/10
persistence

Malware Config

Targets

    • Target

      Clip1.exe

    • Size

      11.2MB

    • MD5

      63b52dc8c2257b9eeef4957aaf041cbe

    • SHA1

      37f2315507ee443ea3893776bded235b3776fcb4

    • SHA256

      ba5ff1d9734c549d5df671c2891b58228054bc7689b91cf0b7b02e6e1a598139

    • SHA512

      99a028c18f543aa26a171f796f44c348c178158cb6e6d2125bdb7f385247d6952c143146e4f5fea2ceaee4690be0d1592639fa29c8ad3104ff2672bc5b0aea38

    • SSDEEP

      196608:kZXqP8ngnNj/Y3HJlCvIDlWFIgoGkNa6kGr4B1Ho/5EM5QRF9:8y1nNj/Y3HJs87AkNfkzohF5QRF9

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks