Overview

overview

8

Static

static

1

09ceeefd32...ff.exe

windows7-x64

1

09ceeefd32...ff.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    09ceeefd3297e4ec6e500bb98bc0c8472f0e995834cba8a9673eeafd26117cff

  • Size

    53KB

  • Sample

    240112-2mse6sgac2

  • MD5

    787b4125660d64a6865c5b5ffef6e192

  • SHA1

    101956cf564c0d23fdabcc60f7afc0d879cd2d08

  • SHA256

    09ceeefd3297e4ec6e500bb98bc0c8472f0e995834cba8a9673eeafd26117cff

  • SHA512

    1df7b78d2d700fd7426c2abbeeab7a6d41e508f6d7d1ec844cd6d9b2f777872e8e4e1281e347b949180899f72337974e26d00610be6d7ee510a818845f83be60

  • SSDEEP

    384:+hWFNiTzJhM4mWDXzuHRN7rpb045DNR9zO0q:7FNKz/Jbza1b9z

Score
8/10

Malware Config

Targets

    • Target

      09ceeefd3297e4ec6e500bb98bc0c8472f0e995834cba8a9673eeafd26117cff

    • Size

      53KB

    • MD5

      787b4125660d64a6865c5b5ffef6e192

    • SHA1

      101956cf564c0d23fdabcc60f7afc0d879cd2d08

    • SHA256

      09ceeefd3297e4ec6e500bb98bc0c8472f0e995834cba8a9673eeafd26117cff

    • SHA512

      1df7b78d2d700fd7426c2abbeeab7a6d41e508f6d7d1ec844cd6d9b2f777872e8e4e1281e347b949180899f72337974e26d00610be6d7ee510a818845f83be60

    • SSDEEP

      384:+hWFNiTzJhM4mWDXzuHRN7rpb045DNR9zO0q:7FNKz/Jbza1b9z

    Score
    8/10

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks