Overview

overview

8

Static

static

3

389e0c00b8...2a.exe

windows7-x64

8

389e0c00b8...2a.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    389e0c00b873d0d8ba0c355dc932442a

  • Size

    232KB

  • Sample

    231231-q37z1sfeam

  • MD5

    389e0c00b873d0d8ba0c355dc932442a

  • SHA1

    473bd9fac2c7c9b36f4bee82fc42687d6887cdbb

  • SHA256

    a2b347a71c76049395ffa0b37702e2c12ced99ba844ac85ed0df45e0a00cd33a

  • SHA512

    c29151f6b381b837146bfbd6bc1f309f382c67074421848cf3dc21a3357bb72ebfdc96157dbe86d3be9c5334efb21314c8d88a613d9a0168dd1f51b2b52f9dc0

  • SSDEEP

    6144:sSmTEQGL3IzuzBZztX4Joz5qhqj5m9RXLOuEMz:QaoqMJoz5hVmvXLOuE0

Score
8/10
persistence

Malware Config

Targets

    • Target

      389e0c00b873d0d8ba0c355dc932442a

    • Size

      232KB

    • MD5

      389e0c00b873d0d8ba0c355dc932442a

    • SHA1

      473bd9fac2c7c9b36f4bee82fc42687d6887cdbb

    • SHA256

      a2b347a71c76049395ffa0b37702e2c12ced99ba844ac85ed0df45e0a00cd33a

    • SHA512

      c29151f6b381b837146bfbd6bc1f309f382c67074421848cf3dc21a3357bb72ebfdc96157dbe86d3be9c5334efb21314c8d88a613d9a0168dd1f51b2b52f9dc0

    • SSDEEP

      6144:sSmTEQGL3IzuzBZztX4Joz5qhqj5m9RXLOuEMz:QaoqMJoz5hVmvXLOuE0

    Score
    8/10
    persistence

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks