Overview

overview

7

Static

static

3

surrogateperfcrt.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    surrogateperfcrt.exe

  • Size

    571KB

  • Sample

    230901-lxbx6sec78

  • MD5

    52123830892771269993397681956550

  • SHA1

    dbc88089c36093bfbc1249feb71df279d0842630

  • SHA256

    4861231818a4efce13d2a30d44596d2443eeebf95c22e6fd67d6bfb38e8fb1b6

  • SHA512

    7aabda4863b50a1e6a82dbf4ac97c7deca419cf7a78e79fc360342ed42c84ea68ed300fd8217167181e4d9531b313eec83b9bde7f783e67281ef90937dbbbc29

  • SSDEEP

    12288:ubLvAJ7rwSYcfCz6Ljv0kFe2IEqclYhcrK:0ClYcfCW/FzIyihqK

Score
7/10

Malware Config

Targets

    • Target

      surrogateperfcrt.exe

    • Size

      571KB

    • MD5

      52123830892771269993397681956550

    • SHA1

      dbc88089c36093bfbc1249feb71df279d0842630

    • SHA256

      4861231818a4efce13d2a30d44596d2443eeebf95c22e6fd67d6bfb38e8fb1b6

    • SHA512

      7aabda4863b50a1e6a82dbf4ac97c7deca419cf7a78e79fc360342ed42c84ea68ed300fd8217167181e4d9531b313eec83b9bde7f783e67281ef90937dbbbc29

    • SSDEEP

      12288:ubLvAJ7rwSYcfCz6Ljv0kFe2IEqclYhcrK:0ClYcfCW/FzIyihqK

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks