Overview

overview

8

Static

static

3

fd32cf5b36...1f.exe

windows7-x64

8

fd32cf5b36...1f.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    fd32cf5b369feac7508669324c2500468e4413ace55ed7924574374f8fa71a1f

  • Size

    770KB

  • Sample

    230611-tybb2ahd83

  • MD5

    08ca9cb99b33000ee826b32d29959702

  • SHA1

    9197c97a7981a89f49a1ccd95da69c132dd3e8d7

  • SHA256

    fd32cf5b369feac7508669324c2500468e4413ace55ed7924574374f8fa71a1f

  • SHA512

    2831a1cf4ff78e3b7c355df9a2a7ee5f304df121f3c3ebefaf557b57adfa335c0aae5ee5cc9b67dd7f728aac742a3ff280b59c20010345a45348676d5e6bcf74

  • SSDEEP

    24576:O7eit0t9EsyC1XS64DbvYwdzv1n4WwwS6u3sK:O7eimfEsr1X/4wwbn4Wpi

Score
8/10
persistence

Malware Config

Targets

    • Target

      fd32cf5b369feac7508669324c2500468e4413ace55ed7924574374f8fa71a1f

    • Size

      770KB

    • MD5

      08ca9cb99b33000ee826b32d29959702

    • SHA1

      9197c97a7981a89f49a1ccd95da69c132dd3e8d7

    • SHA256

      fd32cf5b369feac7508669324c2500468e4413ace55ed7924574374f8fa71a1f

    • SHA512

      2831a1cf4ff78e3b7c355df9a2a7ee5f304df121f3c3ebefaf557b57adfa335c0aae5ee5cc9b67dd7f728aac742a3ff280b59c20010345a45348676d5e6bcf74

    • SSDEEP

      24576:O7eit0t9EsyC1XS64DbvYwdzv1n4WwwS6u3sK:O7eimfEsr1X/4wwbn4Wpi

    Score
    8/10
    persistence

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks