Overview

overview

8

Static

static

3

2bf76c9771...16.exe

windows7-x64

2bf76c9771...16.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2bf76c97712fcc3bd06c644cb9cbf716

  • Size

    17KB

  • Sample

    231219-p9hs2ahehn

  • MD5

    2bf76c97712fcc3bd06c644cb9cbf716

  • SHA1

    68ef9ad3b99ced5b338ae429f21bd9a09fb0db5e

  • SHA256

    00bd490391143b828fd31c4dacc9e335409934dc5722861d2e062d1076217992

  • SHA512

    6c410516b2d26c36e61cb5be38bcac4b09174a9b86d23e781127b016b85eb0c44aba49a57598b1f0d3851f29395cea30f87c46a6f80c62ca12f3babb6ea69ef8

  • SSDEEP

    384:pFiNw2/OcmZO2Zp+Nye8pqrmub8TyztsDN:pcJ/OoKK8o8TyJc

Score
8/10
persistence

Malware Config

Targets

    • Target

      2bf76c97712fcc3bd06c644cb9cbf716

    • Size

      17KB

    • MD5

      2bf76c97712fcc3bd06c644cb9cbf716

    • SHA1

      68ef9ad3b99ced5b338ae429f21bd9a09fb0db5e

    • SHA256

      00bd490391143b828fd31c4dacc9e335409934dc5722861d2e062d1076217992

    • SHA512

      6c410516b2d26c36e61cb5be38bcac4b09174a9b86d23e781127b016b85eb0c44aba49a57598b1f0d3851f29395cea30f87c46a6f80c62ca12f3babb6ea69ef8

    • SSDEEP

      384:pFiNw2/OcmZO2Zp+Nye8pqrmub8TyztsDN:pcJ/OoKK8o8TyJc

    Score
    8/10
    persistence

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks