Overview

overview

8

Static

static

3

63f137946d...55.exe

windows7-x64

8

63f137946d...55.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    63f137946d2efb0ee3db0c8ea7dadd55

  • Size

    17KB

  • Sample

    240117-3x2l9shed8

  • MD5

    63f137946d2efb0ee3db0c8ea7dadd55

  • SHA1

    4f595869d8daf9a13d2f11a293f0cf37df0b743c

  • SHA256

    8a92ab8aa561fede32327ffe17d3ca98536960f9fcb5dee275678ad1424a846a

  • SHA512

    759c0419448dcb8d2f7197406d8266b8e1bd3c6174af90fb89b1d847ddb160c3b404af0cee60de9de5088c68786ae77c0a4dde0a20804c112be9b1bee6b7b751

  • SSDEEP

    384:xnEUlCKqETTxIEyUEbPHFvxb8VSEHkF9vJpFa3iSMC1kyuwFsUO0rNV:VlCKxXytfDnQVSEErxpFziJNV

Score
8/10
persistence

Malware Config

Targets

    • Target

      63f137946d2efb0ee3db0c8ea7dadd55

    • Size

      17KB

    • MD5

      63f137946d2efb0ee3db0c8ea7dadd55

    • SHA1

      4f595869d8daf9a13d2f11a293f0cf37df0b743c

    • SHA256

      8a92ab8aa561fede32327ffe17d3ca98536960f9fcb5dee275678ad1424a846a

    • SHA512

      759c0419448dcb8d2f7197406d8266b8e1bd3c6174af90fb89b1d847ddb160c3b404af0cee60de9de5088c68786ae77c0a4dde0a20804c112be9b1bee6b7b751

    • SSDEEP

      384:xnEUlCKqETTxIEyUEbPHFvxb8VSEHkF9vJpFa3iSMC1kyuwFsUO0rNV:VlCKxXytfDnQVSEErxpFziJNV

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks