Overview

overview

8

Static

static

3

0e9944a68e...8f.exe

windows7-x64

8

0e9944a68e...8f.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0e9944a68e769e60f718eed8fc9bbe8f

  • Size

    3.0MB

  • Sample

    231230-e6s5gsdgbq

  • MD5

    0e9944a68e769e60f718eed8fc9bbe8f

  • SHA1

    fb143881d51567e30d775a6feb9e689e708bf79d

  • SHA256

    30a7c17ac7dcfcee1c2f62987bbaaa0161599ebe58329fca444adca7cc1079ee

  • SHA512

    6fadab0e61bd497d75f2e79a00be8dfe553b30e0c1ed791c8e4582bdabb6159619a4468e2b92ac1ea32c97cc4554f7d735ab8ba5ddf42fb573277e3ee6f95011

  • SSDEEP

    49152:FFbRs47kQlDJqDvpHf2YDiF1yei0UYhNNEHCf/wrCjsru8/q106y0lhOdyj:z7kYD+p/1DEYiPEHC/OOqur0FjEj

Score
8/10

Malware Config

Targets

    • Target

      0e9944a68e769e60f718eed8fc9bbe8f

    • Size

      3.0MB

    • MD5

      0e9944a68e769e60f718eed8fc9bbe8f

    • SHA1

      fb143881d51567e30d775a6feb9e689e708bf79d

    • SHA256

      30a7c17ac7dcfcee1c2f62987bbaaa0161599ebe58329fca444adca7cc1079ee

    • SHA512

      6fadab0e61bd497d75f2e79a00be8dfe553b30e0c1ed791c8e4582bdabb6159619a4468e2b92ac1ea32c97cc4554f7d735ab8ba5ddf42fb573277e3ee6f95011

    • SSDEEP

      49152:FFbRs47kQlDJqDvpHf2YDiF1yei0UYhNNEHCf/wrCjsru8/q106y0lhOdyj:z7kYD+p/1DEYiPEHC/OOqur0FjEj

    Score
    8/10

    • Drops file in Drivers directory

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks