Overview

overview

8

Static

static

3

simplewall.exe

windows7-x64

1

simplewall.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    simplewall.exe

  • Size

    780KB

  • Sample

    231116-124ajsha97

  • MD5

    f3c5d9d3ff26df02a6764e3186a6f2a8

  • SHA1

    72181dff9d45af62dfe2690ca2d6bf93dcc33b28

  • SHA256

    00b79f0a2bec5dbd14815e7c286de06a5ec394f7713c0cb5318743036d085874

  • SHA512

    5937487b0bfe85fe5700a0080f2a6d541e984dfd87ef5ed9c7e326ddeeee5adbfb98bc4f3b60bdd7321f04b95aea63cf5f8d21201a3ab5437edf8893aeb7474f

  • SSDEEP

    24576:wHHyYqInEFB7AGtROg782oChmTZnx80zvsZU81:KSYFcB7AGtROg74ChmTZnx80O

Score
8/10

Malware Config

Targets

    • Target

      simplewall.exe

    • Size

      780KB

    • MD5

      f3c5d9d3ff26df02a6764e3186a6f2a8

    • SHA1

      72181dff9d45af62dfe2690ca2d6bf93dcc33b28

    • SHA256

      00b79f0a2bec5dbd14815e7c286de06a5ec394f7713c0cb5318743036d085874

    • SHA512

      5937487b0bfe85fe5700a0080f2a6d541e984dfd87ef5ed9c7e326ddeeee5adbfb98bc4f3b60bdd7321f04b95aea63cf5f8d21201a3ab5437edf8893aeb7474f

    • SSDEEP

      24576:wHHyYqInEFB7AGtROg782oChmTZnx80zvsZU81:KSYFcB7AGtROg74ChmTZnx80O

    Score
    8/10

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks