Overview

overview

8

Static

static

3

44c035798f...42.exe

windows7-x64

8

44c035798f...42.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44c035798fe1a2784c9184c1e3b11442

  • Size

    27KB

  • Sample

    240105-3xcm5seag5

  • MD5

    44c035798fe1a2784c9184c1e3b11442

  • SHA1

    69ceba07244039bba2266a561497dd29f17b71fa

  • SHA256

    a72d687c5d2445e8d48d4bb99a90be69597c60f720d72eb1f9a1ea1a0b2d37b1

  • SHA512

    84150138b5bbefa9a364644e1c3c084c89fbe9311924121eb0996fe8a86d87a085fb9a567e044d57b236424400abb8f0b6e06d39580ced9e1b29ad8ceb205fee

  • SSDEEP

    768:Wf3Eo+c9xbmYi7mkoLbp6epKFbMIFaiFRyNSM3jNwq4oSWJY:Rc9bi7mAepKFbNRyNB3pprg

Score
8/10
persistence

Malware Config

Targets

    • Target

      44c035798fe1a2784c9184c1e3b11442

    • Size

      27KB

    • MD5

      44c035798fe1a2784c9184c1e3b11442

    • SHA1

      69ceba07244039bba2266a561497dd29f17b71fa

    • SHA256

      a72d687c5d2445e8d48d4bb99a90be69597c60f720d72eb1f9a1ea1a0b2d37b1

    • SHA512

      84150138b5bbefa9a364644e1c3c084c89fbe9311924121eb0996fe8a86d87a085fb9a567e044d57b236424400abb8f0b6e06d39580ced9e1b29ad8ceb205fee

    • SSDEEP

      768:Wf3Eo+c9xbmYi7mkoLbp6epKFbMIFaiFRyNSM3jNwq4oSWJY:Rc9bi7mAepKFbNRyNB3pprg

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks