Overview

overview

7

Static

static

1

38e0fdf0ba...32.exe

windows7-x64

7

38e0fdf0ba...32.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    38e0fdf0ba2cb94aea2943841bc08870_exe32.exe

  • Size

    12KB

  • Sample

    231015-ybcnssch38

  • MD5

    38e0fdf0ba2cb94aea2943841bc08870

  • SHA1

    ada5c54e8f1c6e16d6fb8ee6ec31e11bddbdd33c

  • SHA256

    521d45e0905279a8eaa2edc0ca6c1e14ce7781a58a8054b0db496156b0227428

  • SHA512

    bdacbd54409f373187d8bbbb07b9a006f80f282a2e6211db49d194e18588914629ea5039239703fdd135c51c6da1bf8c33bc0693a1a3c35bc60b6ff480594181

  • SSDEEP

    384:IL7li/2z3q2DcEQvdhcJKLTp/NK9xaGv:2rM/Q9cGv

Score
7/10

Malware Config

Targets

    • Target

      38e0fdf0ba2cb94aea2943841bc08870_exe32.exe

    • Size

      12KB

    • MD5

      38e0fdf0ba2cb94aea2943841bc08870

    • SHA1

      ada5c54e8f1c6e16d6fb8ee6ec31e11bddbdd33c

    • SHA256

      521d45e0905279a8eaa2edc0ca6c1e14ce7781a58a8054b0db496156b0227428

    • SHA512

      bdacbd54409f373187d8bbbb07b9a006f80f282a2e6211db49d194e18588914629ea5039239703fdd135c51c6da1bf8c33bc0693a1a3c35bc60b6ff480594181

    • SSDEEP

      384:IL7li/2z3q2DcEQvdhcJKLTp/NK9xaGv:2rM/Q9cGv

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks