Overview

overview

7

Static

static

3

37be815476...d8.exe

windows7-x64

7

37be815476...d8.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    37be815476b4038ad16eb0de149dd6d8

  • Size

    540KB

  • Sample

    231231-qk85csabbl

  • MD5

    37be815476b4038ad16eb0de149dd6d8

  • SHA1

    5f3fee76ca3e2e2f2a83b53fd4888f64c47a0c64

  • SHA256

    f1fdc2e16931c6857a55db3895d029d76a2f1e2697a5a160aa72f3ddf81b31f8

  • SHA512

    1a1b4495964de93b9b363fb7f46d7d516c163987896f4f76262ffd7e3d5a028cd23317b82296898981c5038541ccc233ca2e9b1ffd3ed020665b5171680ab6bf

  • SSDEEP

    6144:gmPTBIWwaLftjqnpjExlEJuXBteZKPfDm23lH5Q/OJ:gYpFyJwmKPfD/Q/Q

Score
7/10
persistence

Malware Config

Targets

    • Target

      37be815476b4038ad16eb0de149dd6d8

    • Size

      540KB

    • MD5

      37be815476b4038ad16eb0de149dd6d8

    • SHA1

      5f3fee76ca3e2e2f2a83b53fd4888f64c47a0c64

    • SHA256

      f1fdc2e16931c6857a55db3895d029d76a2f1e2697a5a160aa72f3ddf81b31f8

    • SHA512

      1a1b4495964de93b9b363fb7f46d7d516c163987896f4f76262ffd7e3d5a028cd23317b82296898981c5038541ccc233ca2e9b1ffd3ed020665b5171680ab6bf

    • SSDEEP

      6144:gmPTBIWwaLftjqnpjExlEJuXBteZKPfDm23lH5Q/OJ:gYpFyJwmKPfD/Q/Q

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks