Overview

overview

8

Static

static

3

ce365bcd07...46.exe

windows7-x64

8

ce365bcd07...46.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    ce365bcd0792ff0ed848eb7293b18f46

  • Size

    134KB

  • Sample

    231222-r88zyadhbn

  • MD5

    ce365bcd0792ff0ed848eb7293b18f46

  • SHA1

    b98e838f288ded772b28aba394036e6e9a042c65

  • SHA256

    ea3b0bd7ca96613712eb756b648120dfc481ba36c394b7a9ef0cded49eebcc5c

  • SHA512

    e606b026e92cfc91ebcf73e6e4c5ac0463a92899a19a2fd9b6cf2da5709c28e94800e8accbb7589232f324434db8dd61feb1d418e20c71232c9e977dbf77e321

  • SSDEEP

    1536:wPMZE1+m4ZkEPN5pT9NEyzvPMZE1+m4ZkEPN5pT9NEyzq:wPMZE1y9hNEkvPMZE1y9hNEkq

Score
8/10
persistence

Malware Config

Targets

    • Target

      ce365bcd0792ff0ed848eb7293b18f46

    • Size

      134KB

    • MD5

      ce365bcd0792ff0ed848eb7293b18f46

    • SHA1

      b98e838f288ded772b28aba394036e6e9a042c65

    • SHA256

      ea3b0bd7ca96613712eb756b648120dfc481ba36c394b7a9ef0cded49eebcc5c

    • SHA512

      e606b026e92cfc91ebcf73e6e4c5ac0463a92899a19a2fd9b6cf2da5709c28e94800e8accbb7589232f324434db8dd61feb1d418e20c71232c9e977dbf77e321

    • SSDEEP

      1536:wPMZE1+m4ZkEPN5pT9NEyzvPMZE1+m4ZkEPN5pT9NEyzq:wPMZE1y9hNEkvPMZE1y9hNEkq

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks