Overview

overview

8

Static

static

3

3bcf8066ec...82.exe

windows7-x64

8

3bcf8066ec...82.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    3bcf8066ec319663350016ea4ca89082

  • Size

    658KB

  • Sample

    231225-zekdgsadhr

  • MD5

    3bcf8066ec319663350016ea4ca89082

  • SHA1

    32b99222520a054919eaf584bbfe7751b30800fc

  • SHA256

    4f94a2bf74515d25387909ad2f4f866b66b4a82b4e3ec4fa6fb59162150f9d10

  • SHA512

    f82eba0e256174bda33f9bc081e4ee45aeab247c1ee3f56102a0323d6ed5e7cd205b32fd43dcd6a406fb46d12a13ae64daf6366d84e20e65d968df504c21e4ef

  • SSDEEP

    12288:n66jG/5NwYkK19iOCr+TMoO30mYn0YaAsGoQnxM5DKTrH5eZc2W:LjGAK19iOCr+TMoO30mYn0YaAsqnxM5e

Score
8/10
persistence

Malware Config

Targets

    • Target

      3bcf8066ec319663350016ea4ca89082

    • Size

      658KB

    • MD5

      3bcf8066ec319663350016ea4ca89082

    • SHA1

      32b99222520a054919eaf584bbfe7751b30800fc

    • SHA256

      4f94a2bf74515d25387909ad2f4f866b66b4a82b4e3ec4fa6fb59162150f9d10

    • SHA512

      f82eba0e256174bda33f9bc081e4ee45aeab247c1ee3f56102a0323d6ed5e7cd205b32fd43dcd6a406fb46d12a13ae64daf6366d84e20e65d968df504c21e4ef

    • SSDEEP

      12288:n66jG/5NwYkK19iOCr+TMoO30mYn0YaAsGoQnxM5DKTrH5eZc2W:LjGAK19iOCr+TMoO30mYn0YaAsqnxM5e

    Score
    8/10
    persistence

    • Sets DLL path for service in the registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks