Overview

overview

8

Static

static

3

3ad109bcd0...c4.exe

windows7-x64

1

3ad109bcd0...c4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ad109bcd046c785256765fa424b73c4

  • Size

    17KB

  • Sample

    231231-xr7y7scfbq

  • MD5

    3ad109bcd046c785256765fa424b73c4

  • SHA1

    4a221eb3ccef780f245c3b5140db7f3c0715aadd

  • SHA256

    f4bc49e8de2456e6853cfe3c47588bcc3b8ee3a083d1a7a2fb251e1dbbe3442c

  • SHA512

    58b63b38c0d531d5ea3b224ba5c27a743c69befbe5a8c60be35c4cc7cd589c15df126a0c1d99294f60836bc01ef9a018094ca5109f2d0d88bdb36a962a31508c

  • SSDEEP

    384:jFrp7Z84cmZO2Zp+Nye8pqrmub8TyztsDN:j9/84oKK8o8TyJc

Score
8/10
persistence

Malware Config

Targets

    • Target

      3ad109bcd046c785256765fa424b73c4

    • Size

      17KB

    • MD5

      3ad109bcd046c785256765fa424b73c4

    • SHA1

      4a221eb3ccef780f245c3b5140db7f3c0715aadd

    • SHA256

      f4bc49e8de2456e6853cfe3c47588bcc3b8ee3a083d1a7a2fb251e1dbbe3442c

    • SHA512

      58b63b38c0d531d5ea3b224ba5c27a743c69befbe5a8c60be35c4cc7cd589c15df126a0c1d99294f60836bc01ef9a018094ca5109f2d0d88bdb36a962a31508c

    • SSDEEP

      384:jFrp7Z84cmZO2Zp+Nye8pqrmub8TyztsDN:j9/84oKK8o8TyJc

    Score
    8/10
    persistence

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks