c6cf3602f66c6270f2b0d260bed1870608667c1e7b0746f9a45b010073970550 | Triage

Submit
Reports

Overview

overview

7

Static

static

3

c6cf3602f6...50.exe

windows7-x64

7

c6cf3602f6...50.exe

windows10-2004-x64

7

Sharing

General

Target

c6cf3602f66c6270f2b0d260bed1870608667c1e7b0746f9a45b010073970550
Size

7.0MB
Sample

231013-2vj4rsec2x
MD5

02ca0e661b2e470719bdd3103a3e6b45
SHA1

f07632f3446e46c8c34bda365931d98a1a28a198
SHA256

c6cf3602f66c6270f2b0d260bed1870608667c1e7b0746f9a45b010073970550
SHA512

d3a2517296ac4ee056c7d728c4e626f9fa503f55f2f6f5835d6b32888f4d00a3f7adc9cef3c1bc2448c6bb7dd56f13ecc93c1dc884ff4e10a9ddf8abc90d0f69
SSDEEP

98304:wf/TXCsyTXu8eCiK/fhB+UMchmqL9SFncw0xjJOIOacdKdS/wYfY6Du/zi8AE165:SX+K8NZkchmqZSux8va4UYczPAEA0/z6

Score

7^/10

discovery evasion trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

c6cf3602f66c6270f2b0d260bed1870608667c1e7b0746f9a45b010073970550.exe

Resource

win7-20230831-en

discovery evasion trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

c6cf3602f66c6270f2b0d260bed1870608667c1e7b0746f9a45b010073970550.exe

Resource

win10v2004-20230915-en

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  c6cf3602f66c6270f2b0d260bed1870608667c1e7b0746f9a45b010073970550
- Size
  
  7.0MB
- MD5
  
  02ca0e661b2e470719bdd3103a3e6b45
- SHA1
  
  f07632f3446e46c8c34bda365931d98a1a28a198
- SHA256
  
  c6cf3602f66c6270f2b0d260bed1870608667c1e7b0746f9a45b010073970550
- SHA512
  
  d3a2517296ac4ee056c7d728c4e626f9fa503f55f2f6f5835d6b32888f4d00a3f7adc9cef3c1bc2448c6bb7dd56f13ecc93c1dc884ff4e10a9ddf8abc90d0f69
- SSDEEP
  
  98304:wf/TXCsyTXu8eCiK/fhB+UMchmqL9SFncw0xjJOIOacdKdS/wYfY6Du/zi8AE165:SX+K8NZkchmqZSux8va4UYczPAEA0/z6
Score

7^/10

discovery evasion trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

© 2018-2025

Terms | Privacy