Overview

overview

7

Static

static

3

RFQ 6000066536.exe

windows7-x64

7

RFQ 6000066536.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    RFQ 6000066536.exe

  • Size

    373KB

  • Sample

    230704-j3tztsbf35

  • MD5

    e27c0c55beced8afe48593bfd8bf330a

  • SHA1

    65d99ebb9c66bd65738c318727617e145cb7a331

  • SHA256

    4f46b17d1db8bdb30b33dfa8ed5335149bb4f920780e349b6b02155e337c8b57

  • SHA512

    0b11e5e5ac89fec53a57b7dcce85d01a7a9dd9774a1964644db2ec6ebdaa6cd7a465c088601b19c635534568100e10f6cbff711cf3368a5aea82d6af664d5214

  • SSDEEP

    6144:vYa6fNfrzvw86FftvVMUVHS0ldyYcpco7Kk02gtZvvFcijeWUofUVkdyZ4:vYVNo86fSUVy0ObBivFtSdofeW

Score
7/10
persistence

Malware Config

Targets

    • Target

      RFQ 6000066536.exe

    • Size

      373KB

    • MD5

      e27c0c55beced8afe48593bfd8bf330a

    • SHA1

      65d99ebb9c66bd65738c318727617e145cb7a331

    • SHA256

      4f46b17d1db8bdb30b33dfa8ed5335149bb4f920780e349b6b02155e337c8b57

    • SHA512

      0b11e5e5ac89fec53a57b7dcce85d01a7a9dd9774a1964644db2ec6ebdaa6cd7a465c088601b19c635534568100e10f6cbff711cf3368a5aea82d6af664d5214

    • SSDEEP

      6144:vYa6fNfrzvw86FftvVMUVHS0ldyYcpco7Kk02gtZvvFcijeWUofUVkdyZ4:vYVNo86fSUVy0ObBivFtSdofeW

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks