Overview

overview

7

Static

static

3

6abcf05388...38.exe

windows7-x64

7

6abcf05388...38.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    6abcf0538836726968fc65131cb18338

  • Size

    49KB

  • Sample

    231226-nkrh7sdhe2

  • MD5

    6abcf0538836726968fc65131cb18338

  • SHA1

    9a5c1b3febb054f9ec7063cfcfd3fa59f8573a23

  • SHA256

    dd1f4946417b82e2053494221a466943d3dde98154464b38e5bca5ec3ab0d0af

  • SHA512

    895e39d27b248c2e58280a9c41f5f3f51e220f132098840e97acae9cdf81652742a2518278a009342876044e0a83d8f3294b433a75c05573969966e535696aa3

  • SSDEEP

    768:CRt+1+Tk7CcaHR8Hl5wZe2eCTiFAZBTKTejjPjop34iQQPUH85UgY2JdAtRw5aX:Y87AUB2vTN9Se3Ep1MH+PzjiRw5aX

Score
7/10

Malware Config

Targets

    • Target

      6abcf0538836726968fc65131cb18338

    • Size

      49KB

    • MD5

      6abcf0538836726968fc65131cb18338

    • SHA1

      9a5c1b3febb054f9ec7063cfcfd3fa59f8573a23

    • SHA256

      dd1f4946417b82e2053494221a466943d3dde98154464b38e5bca5ec3ab0d0af

    • SHA512

      895e39d27b248c2e58280a9c41f5f3f51e220f132098840e97acae9cdf81652742a2518278a009342876044e0a83d8f3294b433a75c05573969966e535696aa3

    • SSDEEP

      768:CRt+1+Tk7CcaHR8Hl5wZe2eCTiFAZBTKTejjPjop34iQQPUH85UgY2JdAtRw5aX:Y87AUB2vTN9Se3Ep1MH+PzjiRw5aX

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks