Overview

overview

7

Static

static

3

197ae378a0...a1.exe

windows7-x64

7

197ae378a0...a1.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    197ae378a0b6ef01141a5e447166a21871ab016eb1dbee1f9ae852abc5f2d8a1

  • Size

    508KB

  • Sample

    231011-krb6bacc7z

  • MD5

    1c80b034b4085732c66d24a84acb9bf1

  • SHA1

    475ea8bbafa04f6dbb4dc44b8445795e95898b40

  • SHA256

    197ae378a0b6ef01141a5e447166a21871ab016eb1dbee1f9ae852abc5f2d8a1

  • SHA512

    72b70029196615f311bb5cf655d799074d6fc76070a1b088a46326d2e5886ae09231f0eea0b1c89d3bd3ccd7e0eb6ae14bfbe2e2108348b93c122c7dae96866f

  • SSDEEP

    12288:BFiGMn1ztO2ca2ce2i92iMHD2s2WHtlJ7uNYglAviBv2+YD5:T4n1znJ7uNYgE

Score
7/10
evasiontrojan

Malware Config

Targets

    • Target

      197ae378a0b6ef01141a5e447166a21871ab016eb1dbee1f9ae852abc5f2d8a1

    • Size

      508KB

    • MD5

      1c80b034b4085732c66d24a84acb9bf1

    • SHA1

      475ea8bbafa04f6dbb4dc44b8445795e95898b40

    • SHA256

      197ae378a0b6ef01141a5e447166a21871ab016eb1dbee1f9ae852abc5f2d8a1

    • SHA512

      72b70029196615f311bb5cf655d799074d6fc76070a1b088a46326d2e5886ae09231f0eea0b1c89d3bd3ccd7e0eb6ae14bfbe2e2108348b93c122c7dae96866f

    • SSDEEP

      12288:BFiGMn1ztO2ca2ce2i92iMHD2s2WHtlJ7uNYglAviBv2+YD5:T4n1znJ7uNYgE

    Score
    7/10
    evasiontrojan

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks