Overview

overview

7

Static

static

1

WinSlap.exe

windows7-x64

1

WinSlap.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    WinSlap.exe

  • Size

    837KB

  • Sample

    230322-pxf4nsag2y

  • MD5

    1f4a96e909bccb742dc55b194fde2f1c

  • SHA1

    5ea020915268af8b908b381888611716ec3333a4

  • SHA256

    21fbebfea986f232ca759b6a0e63f90a90ad19467e691a30b9a9654c172752bc

  • SHA512

    82f9c1b8934ee2bced9cf31df7897183487d82649acf34475898a769141687425bb8e7a0f6674a14c4784829d51ea5b8430afb64fe1b8fc36ce54b8d7403766a

  • SSDEEP

    3072:dueK8d1IBfeLb2O4rtQNcpcFcOcGcQmicHN7G4YDozpc1m42naALJ7q9b:KDeLb2zmi+aphAv9

Score
7/10
persistence

Malware Config

Targets

    • Target

      WinSlap.exe

    • Size

      837KB

    • MD5

      1f4a96e909bccb742dc55b194fde2f1c

    • SHA1

      5ea020915268af8b908b381888611716ec3333a4

    • SHA256

      21fbebfea986f232ca759b6a0e63f90a90ad19467e691a30b9a9654c172752bc

    • SHA512

      82f9c1b8934ee2bced9cf31df7897183487d82649acf34475898a769141687425bb8e7a0f6674a14c4784829d51ea5b8430afb64fe1b8fc36ce54b8d7403766a

    • SSDEEP

      3072:dueK8d1IBfeLb2O4rtQNcpcFcOcGcQmicHN7G4YDozpc1m42naALJ7q9b:KDeLb2zmi+aphAv9

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Modifies system executable filetype association

      persistence

    • Registers COM server for autorun

      persistence

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks