Overview

overview

7

Static

static

3

1.exe

windows7-x64

7

1.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    040d3c917ce6b78a6df552b1074c8f94

  • Size

    602KB

  • Sample

    231225-ef3agadaaq

  • MD5

    040d3c917ce6b78a6df552b1074c8f94

  • SHA1

    373caa59dcfbc3df77a2238927cc9513cb3438bd

  • SHA256

    e2fa29c224800b069b2d57d8444515db48a5d2ada0d18e2ecd09d3caaab8532d

  • SHA512

    e96a78ca3ba890f4547f7fd5a0e4870e73d589216f53f72b8017f1266ab2dc32bfd228a26609d6434951c68c225b30ca71117b9406f3f22937be0a4ba7bf3f46

  • SSDEEP

    12288:okeMeJhKjkRvjuz3piAUzM0z4qsI4gRDrzIX/f8JrizBATCUPTiW1cgyEJQ88Nq:1rIhKYRvWUzM0zs6rI34uzB8CQyVI

Score
7/10

Malware Config

Targets

    • Target

      1.exe

    • Size

      610KB

    • MD5

      aa4814cd12e5bbcb9d43f053ce284cb5

    • SHA1

      5203f9a885739c4b739ec3b6aa090692c72d8583

    • SHA256

      807d107511365e7da46ae2c010a5413fded7ce2e5c0a647ed64171d004b5f129

    • SHA512

      231989d9718941ca457eaf79ab9f719d293be1fbfc551e15e680d3b6cda7a7b087838472f9b8c5d9a2e3baa116119fe4a0f2fb6d66e696bc511a810399a1d643

    • SSDEEP

      12288:SoFrggvvuzNpiBw2MGmv4zF3Z4mxxF/mJri5BAhCFPTiAAcg91JQ8WNu:/egvvw2M3vkQmXFiu5BeCx4MY

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks