Overview

overview

7

Static

static

3

017bf17159...81.exe

windows7-x64

7

017bf17159...81.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    017bf1715955bf86ce50019701672081

  • Size

    1.2MB

  • Sample

    231229-xz94jahedl

  • MD5

    017bf1715955bf86ce50019701672081

  • SHA1

    3c7dd798ca577f706882ca705910e305d3cc570d

  • SHA256

    50dc462a48b96113b0403ce43470a69e2e9eb6cfa0b358bc28481102e31435ab

  • SHA512

    e67ca2e704e2a6e9b27133ea2a5d02222c979ec5c2fb8e9185905807b055578dbc6a9f734aa227858fe519b7f043d58ed7c066cea782e2461e60f050771746b4

  • SSDEEP

    24576:N0bQMK/FmbOlk51dSJXsHu69FFEYLys8vQr2p49:ihjbOC1daXsO69h98lp49

Score
7/10
persistence

Malware Config

Targets

    • Target

      017bf1715955bf86ce50019701672081

    • Size

      1.2MB

    • MD5

      017bf1715955bf86ce50019701672081

    • SHA1

      3c7dd798ca577f706882ca705910e305d3cc570d

    • SHA256

      50dc462a48b96113b0403ce43470a69e2e9eb6cfa0b358bc28481102e31435ab

    • SHA512

      e67ca2e704e2a6e9b27133ea2a5d02222c979ec5c2fb8e9185905807b055578dbc6a9f734aa227858fe519b7f043d58ed7c066cea782e2461e60f050771746b4

    • SSDEEP

      24576:N0bQMK/FmbOlk51dSJXsHu69FFEYLys8vQr2p49:ihjbOC1daXsO69h98lp49

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks