Overview

overview

8

Static

static

3

3dc6acdeb6...1a.exe

windows7-x64

8

3dc6acdeb6...1a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3dc6acdeb6849de1556693b413a32c1a

  • Size

    337KB

  • Sample

    231225-1fwzcafga3

  • MD5

    3dc6acdeb6849de1556693b413a32c1a

  • SHA1

    8efbef8efab1420c5d0c2a7b97ccc922e5d5e576

  • SHA256

    21371fe34457b6d56b704363af6feaf59100af149d030800ca347a3b1a7015d7

  • SHA512

    8d8e4cc9468ea89b313749dd2288426131978c7b619a9a7bf5fdc2c75732325717d479be3bb04696fda253a347f50046ce2ca7e676bbf63a792282d6f70afc73

  • SSDEEP

    6144:6YJGOaUmbGKgm4c1NEih8MjZE3+MuT6V0WPxz51a8+okfJyZ0+v:ZJGOY71D1NEiX9O+MY6xPFDaDoR

Score
8/10
persistence

Malware Config

Targets

    • Target

      3dc6acdeb6849de1556693b413a32c1a

    • Size

      337KB

    • MD5

      3dc6acdeb6849de1556693b413a32c1a

    • SHA1

      8efbef8efab1420c5d0c2a7b97ccc922e5d5e576

    • SHA256

      21371fe34457b6d56b704363af6feaf59100af149d030800ca347a3b1a7015d7

    • SHA512

      8d8e4cc9468ea89b313749dd2288426131978c7b619a9a7bf5fdc2c75732325717d479be3bb04696fda253a347f50046ce2ca7e676bbf63a792282d6f70afc73

    • SSDEEP

      6144:6YJGOaUmbGKgm4c1NEih8MjZE3+MuT6V0WPxz51a8+okfJyZ0+v:ZJGOY71D1NEiX9O+MY6xPFDaDoR

    Score
    8/10
    persistence

    • Creates new service(s)

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks