Overview

overview

7

Static

static

3

h1660021.exe

windows7-x64

7

h1660021.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    h1660021.exe

  • Size

    963KB

  • Sample

    230518-rhgg1abc41

  • MD5

    181b014ec7e875429203a2f8a5a15d0c

  • SHA1

    0106677318e2bd9e1d1ba50abbbf288346a3eee6

  • SHA256

    51e5520f9b6317221e6069757239b4d8155066ec80e2d7aa10e4f52e23b0eefa

  • SHA512

    201a4a4d7786fb5e00ef581bd9cf73d34e1ed87942225efdb9ef7935f9d06acc41a07dc215d52cf14fbc8f49407cf0ceba07e3410a92888e2737d5edb6acbbce

  • SSDEEP

    12288:6tLTyenMEh/rI+Ea4seWbh1/PjsrCe3NsGTzbEr6JeUc/X016JNHJPXFk2LxvTr2:6tieMEe+HeWXjsldP3

Score
7/10

Malware Config

Targets

    • Target

      h1660021.exe

    • Size

      963KB

    • MD5

      181b014ec7e875429203a2f8a5a15d0c

    • SHA1

      0106677318e2bd9e1d1ba50abbbf288346a3eee6

    • SHA256

      51e5520f9b6317221e6069757239b4d8155066ec80e2d7aa10e4f52e23b0eefa

    • SHA512

      201a4a4d7786fb5e00ef581bd9cf73d34e1ed87942225efdb9ef7935f9d06acc41a07dc215d52cf14fbc8f49407cf0ceba07e3410a92888e2737d5edb6acbbce

    • SSDEEP

      12288:6tLTyenMEh/rI+Ea4seWbh1/PjsrCe3NsGTzbEr6JeUc/X016JNHJPXFk2LxvTr2:6tieMEe+HeWXjsldP3

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks