Overview

overview

7

Static

static

3

0b4652f096...6e.exe

windows7-x64

7

0b4652f096...6e.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ea971e3b958466f0b14b9a0b8f752a04.bin

  • Size

    924KB

  • Sample

    230724-ddyntshf95

  • MD5

    3b11776c0124cb1c163d6533e085fcad

  • SHA1

    96f7d67b162815e93e6eb5d321797b259f22726a

  • SHA256

    af9dc8727d9df94b7e5adee6a054f1685c513aff8943cdd1f844562f8f7f33e7

  • SHA512

    b6b8b09a50c1935378c2cb81bf72e53c8f2e23d7e591b0613ef367ab69fd1503a537addb7fe5a71e8e3ae4791654da565e2031f29d2bb1c5c2cc502075f2d0c1

  • SSDEEP

    24576:HnccdCuOIpPvARkh2DXuuuOxzWyMhiGyrHjUeumOyb2rX:HpdakhNugiwepKrX

Score
7/10

Malware Config

Targets

    • Target

      0b4652f096693f203cc8cec1a127dca3f07f8226a370d04d59f8f8cd42fb6a6e.exe

    • Size

      1.1MB

    • MD5

      ea971e3b958466f0b14b9a0b8f752a04

    • SHA1

      602d42d166faa27e7c7c10d6ab61c87e34a20b45

    • SHA256

      0b4652f096693f203cc8cec1a127dca3f07f8226a370d04d59f8f8cd42fb6a6e

    • SHA512

      79054154557c8efe3333650903f73be8aa6e5661af898ab039ff75dc06f51c5187171b9ef3f4304132a71bf5b0933c95eceef7d569ce3d4a740e20ab70e11712

    • SSDEEP

      24576:wNA3R5drX1Dq0OFpE0i/jsrjRiwKq+S3LfK7h+y56t:p5pSWvArN+S3UV5K

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks