Overview

overview

8

Static

static

1

finevoice-setup64.exe

windows7-x64

4

finevoice-setup64.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    finevoice-setup64.exe

  • Size

    5.1MB

  • Sample

    230603-fr3wtaga3y

  • MD5

    c9b7f334aa1cc4ef86e8aa9287518de1

  • SHA1

    36e78ef5616574f6ad98f53557284bee28b4951f

  • SHA256

    d63bcca11c5d963d6d0058e17ff14307befa0ca5f1b6451fbaab59fa43e363a4

  • SHA512

    1f72367712831fbc04f4a870069ab3367a510b1f9dd41eb852e92ca08572b31fa78b443c107396fdf000c8c1cb347de3273baf66e3763095804e44f6bf2818c5

  • SSDEEP

    98304:ig03MDmVFjISysgff5P+jPCsm9Ac+kPAKjEeYOyS6FcoEkGEt/uDIMBZhk1siWPk:ig03MQFjISyZf5P+jPC9l3EeYOyS6SE3

Score
8/10
discoveryevasion

Malware Config

Targets

    • Target

      finevoice-setup64.exe

    • Size

      5.1MB

    • MD5

      c9b7f334aa1cc4ef86e8aa9287518de1

    • SHA1

      36e78ef5616574f6ad98f53557284bee28b4951f

    • SHA256

      d63bcca11c5d963d6d0058e17ff14307befa0ca5f1b6451fbaab59fa43e363a4

    • SHA512

      1f72367712831fbc04f4a870069ab3367a510b1f9dd41eb852e92ca08572b31fa78b443c107396fdf000c8c1cb347de3273baf66e3763095804e44f6bf2818c5

    • SSDEEP

      98304:ig03MDmVFjISysgff5P+jPCsm9Ac+kPAKjEeYOyS6FcoEkGEt/uDIMBZhk1siWPk:ig03MQFjISyZf5P+jPC9l3EeYOyS6SE3

    Score
    8/10
    discoveryevasion

    • Drops file in Drivers directory

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks