Overview

overview

7

Static

static

3

IMG_000430...cr.exe

windows7-x64

7

IMG_000430...cr.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    IMG_00043040001.pdf.scr.exe

  • Size

    1.6MB

  • Sample

    230702-pnwsrscf4t

  • MD5

    e8cca98949e900fddc9a4644c04ddfed

  • SHA1

    c7b95835026510433d5e1f5d1ee914d7762ca17a

  • SHA256

    240a5457b19b75234f364a9d26364c3d85c00cfd8aa2e240c41c4ce2a4f208d8

  • SHA512

    b15af633e4398411e877f77d8cfb86e4b28d3d2a2702c8e42b7d1c5f976e9ebfed9fce711eb42282aff523f48e493dd4ef5cec1dbec466eb8f7a649c2b1cb6c5

  • SSDEEP

    49152:OB/uT/w6V7+BKmXeBWlVM+sC8Q01x6wU/:QiT6rlVM+sC8Q01xbU/

Score
7/10
persistence

Malware Config

Targets

    • Target

      IMG_00043040001.pdf.scr.exe

    • Size

      1.6MB

    • MD5

      e8cca98949e900fddc9a4644c04ddfed

    • SHA1

      c7b95835026510433d5e1f5d1ee914d7762ca17a

    • SHA256

      240a5457b19b75234f364a9d26364c3d85c00cfd8aa2e240c41c4ce2a4f208d8

    • SHA512

      b15af633e4398411e877f77d8cfb86e4b28d3d2a2702c8e42b7d1c5f976e9ebfed9fce711eb42282aff523f48e493dd4ef5cec1dbec466eb8f7a649c2b1cb6c5

    • SSDEEP

      49152:OB/uT/w6V7+BKmXeBWlVM+sC8Q01x6wU/:QiT6rlVM+sC8Q01xbU/

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks