Overview

overview

7

Static

static

3

9adf2e1726...86.exe

windows7-x64

7

9adf2e1726...86.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    9adf2e1726453a53e60fb1ec62de872ec17c65a5af40671981ff24bfa8122a86

  • Size

    126KB

  • Sample

    230708-y8jhlsah4y

  • MD5

    4f6c3f8407f882fcfb21b1773ebc7d28

  • SHA1

    1b1bd3675d39fdee4443b01a282cd52e5e39a69e

  • SHA256

    9adf2e1726453a53e60fb1ec62de872ec17c65a5af40671981ff24bfa8122a86

  • SHA512

    f05a6bb3fd5f90d0b50d582a8a306370149753a20a32d46fd00e0259b9c5d561506973e86e6f80c02d9b748b56444ee4ac677414ba70ceab142da4c5ba26dea9

  • SSDEEP

    3072:l+vlAMRXAQUFYRj3DR2ItqVg9UI1hncm6A0Q/r9GJEwav2sSNMBqnHt:wvlAkAsl3DR2IMq9zntr0S9GJEAKqnHt

Score
7/10

Malware Config

Targets

    • Target

      9adf2e1726453a53e60fb1ec62de872ec17c65a5af40671981ff24bfa8122a86

    • Size

      126KB

    • MD5

      4f6c3f8407f882fcfb21b1773ebc7d28

    • SHA1

      1b1bd3675d39fdee4443b01a282cd52e5e39a69e

    • SHA256

      9adf2e1726453a53e60fb1ec62de872ec17c65a5af40671981ff24bfa8122a86

    • SHA512

      f05a6bb3fd5f90d0b50d582a8a306370149753a20a32d46fd00e0259b9c5d561506973e86e6f80c02d9b748b56444ee4ac677414ba70ceab142da4c5ba26dea9

    • SSDEEP

      3072:l+vlAMRXAQUFYRj3DR2ItqVg9UI1hncm6A0Q/r9GJEwav2sSNMBqnHt:wvlAkAsl3DR2IMq9zntr0S9GJEAKqnHt

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks