Overview

overview

8

Static

static

1

download (44).jpg

windows10-1703-x64

8

Resubmissions

01-09-2023 07:59

230901-jvhltsdd9v 3

05-05-2023 10:28

230505-mhzalahd74 3

05-05-2023 09:52

230505-lwdelshc74 8

05-05-2023 09:08

230505-k3yhpahb74 6

04-05-2023 13:39

230504-qybq1see31 3

28-04-2023 09:25

230428-ldl9ssda66 3

28-04-2023 08:54

230428-kt32tach67 3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    download (44).jpeg

  • Size

    9KB

  • Sample

    230505-lwdelshc74

  • MD5

    06e4c9387b3d8192100410f428e4f3ca

  • SHA1

    4e24fa5418129fdf23bddecca7ecb697c256ae2d

  • SHA256

    3c1ec2b81d4b0a36297045b5d3af462f04029d3ff0b6792293ca4c80dc151081

  • SHA512

    c7d96e23e951f1da6490d54bcfa72bbddb7a43804ee7c45e2eb884c9ed9abc7676cddf45d4cb441f807c72dc333b68082101f21a293c407283de53acb175b12d

  • SSDEEP

    192:EwerdH6sxlAAPTEsuimOxd+lIrmEmkJx8F:Ewepa9APTER/IrdJGF

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      download (44).jpeg

    • Size

      9KB

    • MD5

      06e4c9387b3d8192100410f428e4f3ca

    • SHA1

      4e24fa5418129fdf23bddecca7ecb697c256ae2d

    • SHA256

      3c1ec2b81d4b0a36297045b5d3af462f04029d3ff0b6792293ca4c80dc151081

    • SHA512

      c7d96e23e951f1da6490d54bcfa72bbddb7a43804ee7c45e2eb884c9ed9abc7676cddf45d4cb441f807c72dc333b68082101f21a293c407283de53acb175b12d

    • SSDEEP

      192:EwerdH6sxlAAPTEsuimOxd+lIrmEmkJx8F:Ewepa9APTER/IrdJGF

    Score
    8/10
    discoverypersistence

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks