Overview

overview

8

Static

static

3

0efebc2e8c...8b.exe

windows7-x64

8

0efebc2e8c...8b.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0efebc2e8c89534522e84989f37c008b

  • Size

    17KB

  • Sample

    231230-fe6ryaaeb8

  • MD5

    0efebc2e8c89534522e84989f37c008b

  • SHA1

    2a9ea82124ecbbcd29d772501837bdb8dc1460f9

  • SHA256

    e6fb124d87e69d97b1cc0d98852c831e3fc3c5b6025b2681d91ac620b1380482

  • SHA512

    4dd30694d42f253966e312b9a8a9ea3ac951c3749a4beb58414f073ef690bc28a7e9ddeba62cef7558d2224fefab78ebc8b2db3993d5442eeed3108228494480

  • SSDEEP

    384:AFdP7NWPcmZO2Zp+Nye8pqrmub8TyztsDN:A/pWPoKK8o8TyJc

Score
8/10
persistence

Malware Config

Targets

    • Target

      0efebc2e8c89534522e84989f37c008b

    • Size

      17KB

    • MD5

      0efebc2e8c89534522e84989f37c008b

    • SHA1

      2a9ea82124ecbbcd29d772501837bdb8dc1460f9

    • SHA256

      e6fb124d87e69d97b1cc0d98852c831e3fc3c5b6025b2681d91ac620b1380482

    • SHA512

      4dd30694d42f253966e312b9a8a9ea3ac951c3749a4beb58414f073ef690bc28a7e9ddeba62cef7558d2224fefab78ebc8b2db3993d5442eeed3108228494480

    • SSDEEP

      384:AFdP7NWPcmZO2Zp+Nye8pqrmub8TyztsDN:A/pWPoKK8o8TyJc

    Score
    8/10
    persistence

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks