Overview

overview

7

Static

static

3

1ea049bcc1...4a.exe

windows7-x64

7

1ea049bcc1...4a.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1ea049bcc18a1a8df6a842ee7e4d114a

  • Size

    544KB

  • Sample

    231225-pqxg3scbcr

  • MD5

    1ea049bcc18a1a8df6a842ee7e4d114a

  • SHA1

    16e8c8c43605a73e9d345ab293db22236e1cdc90

  • SHA256

    430b2f60d23e70a5b5aabc172c3d583cf7e1308cabee4324cd6e24af8c2db89e

  • SHA512

    f903ff053e96e741229dab25420d0f401ba1d6af79cbfbf0e5a9c7fb2f101043ba37931d8804fafd62b45b50f9e811a0079f2a2672ad36b947f1c1ea0c8dc93a

  • SSDEEP

    12288:l8i3VhDKalHjS/SLFkQpo0PlWYmv3tLtDUC:93zDK5qL5o0PkxvdL

Score
7/10

Malware Config

Targets

    • Target

      1ea049bcc18a1a8df6a842ee7e4d114a

    • Size

      544KB

    • MD5

      1ea049bcc18a1a8df6a842ee7e4d114a

    • SHA1

      16e8c8c43605a73e9d345ab293db22236e1cdc90

    • SHA256

      430b2f60d23e70a5b5aabc172c3d583cf7e1308cabee4324cd6e24af8c2db89e

    • SHA512

      f903ff053e96e741229dab25420d0f401ba1d6af79cbfbf0e5a9c7fb2f101043ba37931d8804fafd62b45b50f9e811a0079f2a2672ad36b947f1c1ea0c8dc93a

    • SSDEEP

      12288:l8i3VhDKalHjS/SLFkQpo0PlWYmv3tLtDUC:93zDK5qL5o0PkxvdL

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks