Overview

overview

8

Static

static

3

c3baac987b...1a.exe

windows7-x64

8

c3baac987b...1a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c3baac987bee5800b92b7e2d6d42db1a.exe

  • Size

    1.3MB

  • Sample

    230707-xs7ptsbg8x

  • MD5

    c3baac987bee5800b92b7e2d6d42db1a

  • SHA1

    e5a51b0a453cb005e138d6104c8060472389f16c

  • SHA256

    c6d4d7017e73509ff2023cbe9420d933868afa169eb47aa89711fc758bd9fd18

  • SHA512

    2f7a40f817ee8030a7daa27130d5d86b7159a8a259b0d2b67d63688c57c10edffdfc1c775393896b23e82f20230ada50b4b1946ce4c6c507ea5e851f73d01af0

  • SSDEEP

    24576:NBNlNZ6OLlgJA60l+dgrRUiZY1dpjYjHZBzAUajpRBr46oIiVhX:zNlNZ6cgJA5ag46j5BzgZ5CX

Score
8/10
persistence

Malware Config

Targets

    • Target

      c3baac987bee5800b92b7e2d6d42db1a.exe

    • Size

      1.3MB

    • MD5

      c3baac987bee5800b92b7e2d6d42db1a

    • SHA1

      e5a51b0a453cb005e138d6104c8060472389f16c

    • SHA256

      c6d4d7017e73509ff2023cbe9420d933868afa169eb47aa89711fc758bd9fd18

    • SHA512

      2f7a40f817ee8030a7daa27130d5d86b7159a8a259b0d2b67d63688c57c10edffdfc1c775393896b23e82f20230ada50b4b1946ce4c6c507ea5e851f73d01af0

    • SSDEEP

      24576:NBNlNZ6OLlgJA60l+dgrRUiZY1dpjYjHZBzAUajpRBr46oIiVhX:zNlNZ6cgJA5ag46j5BzgZ5CX

    Score
    8/10
    persistence

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

      persistence

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks