Overview

overview

7

Static

static

3

SARA II _R...23.exe

windows7-x64

7

SARA II _R...23.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SARA II _REQ. FOR PROVISION - JUL 2023.exe

  • Size

    625KB

  • Sample

    230703-x8xvkahh38

  • MD5

    0f1ab83134968c21b48f1304e14a32e7

  • SHA1

    4b82a08d7e32515d99016ece529b83c9361b326d

  • SHA256

    043c7f4a6b3dbc62e5582fb0361676e8226c4cb9b0393638e646cf1545c0eb0c

  • SHA512

    2180091737d6b01d47b80e5fbacc85da33d2d3ed0d951b14c0cd502202ab161eccbecb8ecbd93ed61dfd846d9491854e9fccd10ac105289d6f557e47116d236d

  • SSDEEP

    12288:ZYDXOS4K8Yu+aYSaH4He77yl1+ypXI+P8AX/27+Ok:ZYDXFt75aYnL6l1npRL+Sb

Score
7/10

Malware Config

Targets

    • Target

      SARA II _REQ. FOR PROVISION - JUL 2023.exe

    • Size

      625KB

    • MD5

      0f1ab83134968c21b48f1304e14a32e7

    • SHA1

      4b82a08d7e32515d99016ece529b83c9361b326d

    • SHA256

      043c7f4a6b3dbc62e5582fb0361676e8226c4cb9b0393638e646cf1545c0eb0c

    • SHA512

      2180091737d6b01d47b80e5fbacc85da33d2d3ed0d951b14c0cd502202ab161eccbecb8ecbd93ed61dfd846d9491854e9fccd10ac105289d6f557e47116d236d

    • SSDEEP

      12288:ZYDXOS4K8Yu+aYSaH4He77yl1+ypXI+P8AX/27+Ok:ZYDXFt75aYnL6l1npRL+Sb

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks