Overview

overview

8

Static

static

3

1e8f0bd55a...70.exe

windows7-x64

7

1e8f0bd55a...70.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    1e8f0bd55a0c1ab94514c077f3a9ca70

  • Size

    32KB

  • Sample

    231225-pqbklsdee4

  • MD5

    1e8f0bd55a0c1ab94514c077f3a9ca70

  • SHA1

    3ef75fbead45c835b211c8a71977137b2d06ea08

  • SHA256

    a6d0bf828a16191102fe58a0fef479aeb626a8cae8cbde1255856e80b63df740

  • SHA512

    e43bd46de506fa26b794bcd2dfd7a4c97dcf5f97e42ab7ef357e770f36dce06ba3c7e6b77c2927456214ff494660ad5b639a73f78a54fbf6695b4361f5886643

  • SSDEEP

    384:KFUVqj9nyIArvjTdWAIkNQ5098TVajcOaBGKwPVX76AaZmrhgHirp5OPZpqlBAK7:3W9yIwr8rDO98ozo+R2FWgHirHOste

Score
8/10
persistence

Malware Config

Targets

    • Target

      1e8f0bd55a0c1ab94514c077f3a9ca70

    • Size

      32KB

    • MD5

      1e8f0bd55a0c1ab94514c077f3a9ca70

    • SHA1

      3ef75fbead45c835b211c8a71977137b2d06ea08

    • SHA256

      a6d0bf828a16191102fe58a0fef479aeb626a8cae8cbde1255856e80b63df740

    • SHA512

      e43bd46de506fa26b794bcd2dfd7a4c97dcf5f97e42ab7ef357e770f36dce06ba3c7e6b77c2927456214ff494660ad5b639a73f78a54fbf6695b4361f5886643

    • SSDEEP

      384:KFUVqj9nyIArvjTdWAIkNQ5098TVajcOaBGKwPVX76AaZmrhgHirp5OPZpqlBAK7:3W9yIwr8rDO98ozo+R2FWgHirHOste

    Score
    8/10
    persistence

    • Sets service image path in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks