Overview

overview

7

Static

static

3

tmp.exe

windows7-x64

5

tmp.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    1.1MB

  • Sample

    231011-2es2qsge61

  • MD5

    a490f1848b792df4dc37c9e1b200578d

  • SHA1

    f862b1f3460aafd54b1159b2a180f70e6b3d8d21

  • SHA256

    b61325a676000c0afb169f63048c583bc81cb52e1690a6ccf5642decb7831b5e

  • SHA512

    1e9a492976d2c80acd7cebfa8ca8fba55c3a9cb71ecf12a5c29e648f6fcc0d9d41930a33964c6b85ecbc96150a25dcc08578da5d2e0dd509d370256d4d20f268

  • SSDEEP

    24576:mDXdMCbh0lhSMXlPFN3RFEuHhra2oQfKhBdY7O8gz/7:mBMPt/G29fKhBdYy8ij

Score
7/10

Malware Config

Targets

    • Target

      tmp

    • Size

      1.1MB

    • MD5

      a490f1848b792df4dc37c9e1b200578d

    • SHA1

      f862b1f3460aafd54b1159b2a180f70e6b3d8d21

    • SHA256

      b61325a676000c0afb169f63048c583bc81cb52e1690a6ccf5642decb7831b5e

    • SHA512

      1e9a492976d2c80acd7cebfa8ca8fba55c3a9cb71ecf12a5c29e648f6fcc0d9d41930a33964c6b85ecbc96150a25dcc08578da5d2e0dd509d370256d4d20f268

    • SSDEEP

      24576:mDXdMCbh0lhSMXlPFN3RFEuHhra2oQfKhBdY7O8gz/7:mBMPt/G29fKhBdYy8ij

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks