Overview

overview

7

Static

static

3

yOMHr.exe

windows10-2004-x64

7

Resubmissions

31-07-2023 12:37

230731-ptx8safd79 10

31-07-2023 12:37

230731-ptndksfd76 7

31-07-2023 11:43

230731-nvq1eseh69 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    yOMHr.exe

  • Size

    170KB

  • Sample

    230731-ptndksfd76

  • MD5

    31bd0f224e7e74eee2847f43aae23974

  • SHA1

    92e331e1e8ad30538f38dd7ba31386afafa14a58

  • SHA256

    8b0a5fb13309623c3518473551cb1f55d38d8450129d4a3c16b476f7b2867d7d

  • SHA512

    a13f05a12b084ef425f542ff4be824bbccb5dbdfe085af8b7e19d81a6bcba4b8c1debcc38f6b57bc9265a4db21eed70852ece8cc62b3ef14c47fca3035a55249

  • SSDEEP

    3072:2qeriftL/WSo1vDb53j/8WGUzaqVh4LI8zQpn:2trA/WSo1rl3ALrlHQpn

Score
7/10
persistence

Malware Config

Targets

    • Target

      yOMHr.exe

    • Size

      170KB

    • MD5

      31bd0f224e7e74eee2847f43aae23974

    • SHA1

      92e331e1e8ad30538f38dd7ba31386afafa14a58

    • SHA256

      8b0a5fb13309623c3518473551cb1f55d38d8450129d4a3c16b476f7b2867d7d

    • SHA512

      a13f05a12b084ef425f542ff4be824bbccb5dbdfe085af8b7e19d81a6bcba4b8c1debcc38f6b57bc9265a4db21eed70852ece8cc62b3ef14c47fca3035a55249

    • SSDEEP

      3072:2qeriftL/WSo1vDb53j/8WGUzaqVh4LI8zQpn:2trA/WSo1rl3ALrlHQpn

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks