Overview

overview

8

Static

static

3

079263796f...9b.exe

windows7-x64

8

079263796f...9b.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    079263796f64687947b17efe0353669b

  • Size

    84KB

  • Sample

    231229-3v4c3sdfc6

  • MD5

    079263796f64687947b17efe0353669b

  • SHA1

    0d91c85f64accbbd91d7b2b19ae3d08f2faa0072

  • SHA256

    609bc3ae503a1888c4e90d2f852a1af0e72008a4aa5d3b43f33e6e64db301974

  • SHA512

    295f102479c1b4cdc9f9e14b1232c421b03dae01009829270e2c61ea6a0e2c8b985f33eaf8f851d1bedfdf1e68e5373f239ebed052e5e30fe71de097af2682c9

  • SSDEEP

    1536:dER3th908FSwhbosdu3EC3vmbxmb3NSsqeyYzz2oRWO1h0r7QOK:daltswhMEC3vmbxmb9S/eyYzyq1hUQOK

Score
8/10
persistence

Malware Config

Targets

    • Target

      079263796f64687947b17efe0353669b

    • Size

      84KB

    • MD5

      079263796f64687947b17efe0353669b

    • SHA1

      0d91c85f64accbbd91d7b2b19ae3d08f2faa0072

    • SHA256

      609bc3ae503a1888c4e90d2f852a1af0e72008a4aa5d3b43f33e6e64db301974

    • SHA512

      295f102479c1b4cdc9f9e14b1232c421b03dae01009829270e2c61ea6a0e2c8b985f33eaf8f851d1bedfdf1e68e5373f239ebed052e5e30fe71de097af2682c9

    • SSDEEP

      1536:dER3th908FSwhbosdu3EC3vmbxmb3NSsqeyYzz2oRWO1h0r7QOK:daltswhMEC3vmbxmb9S/eyYzyq1hUQOK

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks