Overview

overview

7

Static

static

3

4275e59e69...53.dll

windows7-x64

6

4275e59e69...53.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    4275e59e694b65116b73c701bfe5b653

  • Size

    194KB

  • Sample

    240105-b9ngmaffhj

  • MD5

    4275e59e694b65116b73c701bfe5b653

  • SHA1

    2bad4bdbc452e5327359e2c80860e64ea29fa2d0

  • SHA256

    45e0c6bdf661d9882509ba387f1153028c3e2bfd8f0e5e30e890b467b56729d5

  • SHA512

    6f66447d660254ff7ad6c0827a03cf5879fbedc0c1db1246d5313d68aa14a09e7dc5236396af2983968739ae024df3f29e94eba4e1cc6fc333fd4a79b6e3d79b

  • SSDEEP

    6144:hb2g9qbHlvfTBOfdE9Y+mVNkZKsrxNq33Js:h99qbHlvfTCdE6+9ZKsq35s

Score
7/10
persistence

Malware Config

Targets

    • Target

      4275e59e694b65116b73c701bfe5b653

    • Size

      194KB

    • MD5

      4275e59e694b65116b73c701bfe5b653

    • SHA1

      2bad4bdbc452e5327359e2c80860e64ea29fa2d0

    • SHA256

      45e0c6bdf661d9882509ba387f1153028c3e2bfd8f0e5e30e890b467b56729d5

    • SHA512

      6f66447d660254ff7ad6c0827a03cf5879fbedc0c1db1246d5313d68aa14a09e7dc5236396af2983968739ae024df3f29e94eba4e1cc6fc333fd4a79b6e3d79b

    • SSDEEP

      6144:hb2g9qbHlvfTBOfdE9Y+mVNkZKsrxNq33Js:h99qbHlvfTCdE6+9ZKsq35s

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks