Overview

overview

8

Static

static

3

109a015354...44.exe

windows7-x64

8

109a015354...44.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    109a01535461cb3ae97c39452a9f8f44

  • Size

    68KB

  • Sample

    231230-gr96kaheeq

  • MD5

    109a01535461cb3ae97c39452a9f8f44

  • SHA1

    2f6a78880cee72140dd7bf3977a28dc8bc4383f6

  • SHA256

    6bdd5b12f76c5763a61e4a23393029c29a617031e2737961bd2675a4051f94b2

  • SHA512

    a085b881ac8cf483c854f657555bb84197826da77e484dbe10373ff237d901adc8a1597fc6013347725d61b39da468ebfceca72fbc4499792edd9e02cbec3ca9

  • SSDEEP

    1536:Wtq94ikOHCxkhd6eVoDaAIkXvA9xd+QfJ/difAr8:9kbkhd64WzIkfY9fCfAr8

Score
8/10
persistence

Malware Config

Targets

    • Target

      109a01535461cb3ae97c39452a9f8f44

    • Size

      68KB

    • MD5

      109a01535461cb3ae97c39452a9f8f44

    • SHA1

      2f6a78880cee72140dd7bf3977a28dc8bc4383f6

    • SHA256

      6bdd5b12f76c5763a61e4a23393029c29a617031e2737961bd2675a4051f94b2

    • SHA512

      a085b881ac8cf483c854f657555bb84197826da77e484dbe10373ff237d901adc8a1597fc6013347725d61b39da468ebfceca72fbc4499792edd9e02cbec3ca9

    • SSDEEP

      1536:Wtq94ikOHCxkhd6eVoDaAIkXvA9xd+QfJ/difAr8:9kbkhd64WzIkfY9fCfAr8

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks