Overview

overview

7

Static

static

1

830b7b7469...1e.exe

windows7-x64

5

830b7b7469...1e.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    52a39381c7a50d7d0a5800d41c5196f6.bin

  • Size

    637KB

  • Sample

    230411-bgdrqabb71

  • MD5

    b731e8adb5a6cc76a1ebfbd42fa581c8

  • SHA1

    dfa671215f1e81bea491b2f0469c7b8a8e0e11f7

  • SHA256

    7e04b5dd8a0a462602640238aa9293c48ebeca631b56ffad5a15d0d21c37cfe0

  • SHA512

    d55c85bced0e922aa9e288dc1922de8474804f24c5eb4d7515c371aa9a22a80c6da561223c5b96f7a44fb29227b95d0b74a2380fff6e9e5daf39a48068ac4230

  • SSDEEP

    12288:AmCMQN12seW2jiOGeHv27ZgPt1xWHK8Db5enDyM7cz7uCGDyugK:JJc2sShGeHvO6kH42IyXK

Score
7/10

Malware Config

Targets

    • Target

      830b7b74693b870abe6d20862ab5f5ab206cdf6e49755d9d542c9124f6646c1e.exe

    • Size

      792KB

    • MD5

      52a39381c7a50d7d0a5800d41c5196f6

    • SHA1

      047168559ddaa2408e5a260dd24b3476818400ef

    • SHA256

      830b7b74693b870abe6d20862ab5f5ab206cdf6e49755d9d542c9124f6646c1e

    • SHA512

      03f0a1806c01020b84861cd6a7196a8c4ba9e6f6b205567c89f716ca7af2f21e1f0a4d2963612b231b73fb615a1a51db5d85fc6ddc93c07019709a9bcf6f1bb1

    • SSDEEP

      12288:fp2iNxbc3gjdsQQx7BRi7vR1SEPIwkE6phrs078L9KW2Sc3Jbe:fp1oPGvRx5wrsGY9KPj

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks