Overview

overview

7

Static

static

3

Remittance Copy.exe

windows7-x64

7

Remittance Copy.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    79877cd14cc871566e47c3491bbcdd4f6b8039965f486f07bcb24193354d653e

  • Size

    370KB

  • Sample

    230904-d6w1psea57

  • MD5

    0b9c7c3e3ea67c4a1b439268f7281c95

  • SHA1

    6a48d53fdd501ca5ebef57ae896967f1090e5e12

  • SHA256

    79877cd14cc871566e47c3491bbcdd4f6b8039965f486f07bcb24193354d653e

  • SHA512

    fa458050c5c6cb924550526018d4baca4833bb1824e1d9c5d8762cc265c0cd265c01400b657eb627252e461aa294de346c4f013da3ae2a24dcf86df58ffabd64

  • SSDEEP

    6144:snqR/1OOhUWWLiL+I7fa06FwTPigfybo/Hdp1Wjvn4KAgVEFAUvDqJ:qqR/13hUDLU+IjtpPigfyboPdmv4KACl

Score
7/10

Malware Config

Targets

    • Target

      Remittance Copy.exe

    • Size

      417KB

    • MD5

      4260b1d30c1a616268a3910105cbcec8

    • SHA1

      6a8ed828b73a0950e9a18f8da4b92eaa0235435e

    • SHA256

      d0f9cf580d6ea95d3760cf25c98477f66686aa50db3bf71431fea95c41007736

    • SHA512

      ddd144057f90fde04e4c5c5a544eba07f565e96a70928c937a43ca712aebe79fd64d6186e78952a8748f53593be1a8f404916f4034d4dcd6e4c9e299e662e24a

    • SSDEEP

      12288:2YUdF1HhU9LW+I9tNDigfIboPPovOYACmFAUvD+j:2YUdFhGLWDzHQ84vxmek6j

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks