Overview

overview

7

Static

static

3

F096545678...00.exe

windows7-x64

7

F096545678...00.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    F09654567890000800.exe

  • Size

    384KB

  • Sample

    231101-g7sapadg54

  • MD5

    68df7db70bbdc9eedc119db2b60b8479

  • SHA1

    dbaa346987ed38f0926f893e087e99a56b497bf6

  • SHA256

    dd9d633ad81e1f36b9cdda3118621059f555f80f5a016a8d254ae9c4e8e159c6

  • SHA512

    bdb2e459d5861bf85b77f072bf95f3699dee08ff22cd904873a50842c6717a8a451a400020813a7cd848fa48674c3b3a1b4566ee1922ccdfefc9795f4340268f

  • SSDEEP

    12288:LnPdvWwuEH9g45TOzPdTnBG4a/QcUfgqX11:TPdvWdl41OZTnBblpoqX3

Score
7/10

Malware Config

Targets

    • Target

      F09654567890000800.exe

    • Size

      384KB

    • MD5

      68df7db70bbdc9eedc119db2b60b8479

    • SHA1

      dbaa346987ed38f0926f893e087e99a56b497bf6

    • SHA256

      dd9d633ad81e1f36b9cdda3118621059f555f80f5a016a8d254ae9c4e8e159c6

    • SHA512

      bdb2e459d5861bf85b77f072bf95f3699dee08ff22cd904873a50842c6717a8a451a400020813a7cd848fa48674c3b3a1b4566ee1922ccdfefc9795f4340268f

    • SSDEEP

      12288:LnPdvWwuEH9g45TOzPdTnBG4a/QcUfgqX11:TPdvWdl41OZTnBblpoqX3

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks