Overview

overview

8

Static

static

3

204588390f...e9.exe

windows7-x64

8

204588390f...e9.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    204588390fe9117b445997fbf3812be9

  • Size

    17KB

  • Sample

    231230-3mwy2agdc9

  • MD5

    204588390fe9117b445997fbf3812be9

  • SHA1

    96a788f4db23dc8f78a0e4208a09ed65cdaec623

  • SHA256

    b0a0abdf2368c856bdc0b5a9f22a0ece380f36b098c0af7868308b17019c4987

  • SHA512

    3be050839715ce99d4ee93b19cb61cda40e271ab00f2a9e79544c702201517a349a5ec89505253b31a93f065a96a6f4571b3ce3d246e0957b721cea548ed1f63

  • SSDEEP

    384:lF1DEu45cmZO2Zp+Nye8pqrmub8TyztsDN:l3H45oKK8o8TyJc

Score
8/10
persistence

Malware Config

Targets

    • Target

      204588390fe9117b445997fbf3812be9

    • Size

      17KB

    • MD5

      204588390fe9117b445997fbf3812be9

    • SHA1

      96a788f4db23dc8f78a0e4208a09ed65cdaec623

    • SHA256

      b0a0abdf2368c856bdc0b5a9f22a0ece380f36b098c0af7868308b17019c4987

    • SHA512

      3be050839715ce99d4ee93b19cb61cda40e271ab00f2a9e79544c702201517a349a5ec89505253b31a93f065a96a6f4571b3ce3d246e0957b721cea548ed1f63

    • SSDEEP

      384:lF1DEu45cmZO2Zp+Nye8pqrmub8TyztsDN:l3H45oKK8o8TyJc

    Score
    8/10
    persistence

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks