Overview

overview

8

Static

static

3

15cb8a9946...d2.exe

windows7-x64

8

15cb8a9946...d2.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    15cb8a99462e6f08a70faa4fb9791f3526ffbdcd310e68ef19c05146c5c228d2

  • Size

    770KB

  • Sample

    231011-wcm5tacf5t

  • MD5

    1cad4480f4bc3c129dc80b1dc912e185

  • SHA1

    c9478b4951932b2883f20b9a55b93f75333fc2e5

  • SHA256

    15cb8a99462e6f08a70faa4fb9791f3526ffbdcd310e68ef19c05146c5c228d2

  • SHA512

    793799275ad410f376bcb50d3e5a7ae4cb18bcd0652b187de411f2a6369a1bd506a30af76f59ef18c94f2a798a4bb7b3292657145b4b61860b5bfc4bc1190802

  • SSDEEP

    24576:O7eit0t9EsyC1XS64DbvYwdzv1n4WwwS6u3sK:O7eimfEsr1X/4wwbn4Wpi

Score
8/10
persistence

Malware Config

Targets

    • Target

      15cb8a99462e6f08a70faa4fb9791f3526ffbdcd310e68ef19c05146c5c228d2

    • Size

      770KB

    • MD5

      1cad4480f4bc3c129dc80b1dc912e185

    • SHA1

      c9478b4951932b2883f20b9a55b93f75333fc2e5

    • SHA256

      15cb8a99462e6f08a70faa4fb9791f3526ffbdcd310e68ef19c05146c5c228d2

    • SHA512

      793799275ad410f376bcb50d3e5a7ae4cb18bcd0652b187de411f2a6369a1bd506a30af76f59ef18c94f2a798a4bb7b3292657145b4b61860b5bfc4bc1190802

    • SSDEEP

      24576:O7eit0t9EsyC1XS64DbvYwdzv1n4WwwS6u3sK:O7eimfEsr1X/4wwbn4Wpi

    Score
    8/10
    persistence

    • Downloads MZ/PE file

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks