Overview

overview

10

Static

static

3

0DACC9DE5E...8F.exe

windows7-x64

7

0DACC9DE5E...8F.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0DACC9DE5E9AFF7B06742BDBC0407F8F.exe

  • Size

    8KB

  • Sample

    230708-zazbvaah81

  • MD5

    0dacc9de5e9aff7b06742bdbc0407f8f

  • SHA1

    79d005840270c90d5723869d81f88c5fbf5a2988

  • SHA256

    154e25a046f1f9604edd46c621d037753819c4e5bca9f147c08eab91fd19ef4d

  • SHA512

    23e233352ba1799b6c20a734bb0938b519ee6905748b6fadbac3a9adb0422149e5faa8b8d37a393448d5bed0b036edd6a54b64eecdc751088cd8262beea993db

  • SSDEEP

    192:/jsfG576wSKHL5bXJLcecsn2f/LpLgLxZrjtXf35Djoi:/ofGdSgL5bZL5csQ/LpLgLxpZf35Djo

Score
10/10

Malware Config

Targets

    • Target

      0DACC9DE5E9AFF7B06742BDBC0407F8F.exe

    • Size

      8KB

    • MD5

      0dacc9de5e9aff7b06742bdbc0407f8f

    • SHA1

      79d005840270c90d5723869d81f88c5fbf5a2988

    • SHA256

      154e25a046f1f9604edd46c621d037753819c4e5bca9f147c08eab91fd19ef4d

    • SHA512

      23e233352ba1799b6c20a734bb0938b519ee6905748b6fadbac3a9adb0422149e5faa8b8d37a393448d5bed0b036edd6a54b64eecdc751088cd8262beea993db

    • SSDEEP

      192:/jsfG576wSKHL5bXJLcecsn2f/LpLgLxZrjtXf35Djoi:/ofGdSgL5bZL5csQ/LpLgLxpZf35Djo

    Score
    10/10

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks