Overview

overview

8

Static

static

1

bb4a53733f...3d.exe

windows7-x64

8

bb4a53733f...3d.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    caso 3.7z

  • Size

    2.3MB

  • Sample

    240119-d7q6vaehe3

  • MD5

    a78191b5d422268bd42c84b036a14030

  • SHA1

    9b13e21b13535c91a28fc0bd01b3502e78b0d61f

  • SHA256

    579d34df84659303dd08a586f10b95a085a6950039fb7841aa5ecbe95f1c1d19

  • SHA512

    4cfe01690c5024c1fc0282e1024cc5850e570a0e82f00ad75ac9656bff9d47e548a51aaaf1bbca53d8d7a0e824c8161e43d01d08c9a835f4ce209fefe920cddd

  • SSDEEP

    49152:YIh7kBaUVmRPYStIA1Y/j9+Os4d+0OaRoMwo/ve6QMofax8:2otPYStI99+G+ZXoXOai

Score
8/10

Malware Config

Targets

    • Target

      bb4a53733f0033eb457acf98da3adcaed09328dbd37dd8991d788ae67187b33d

    • Size

      2.9MB

    • MD5

      cdd6433b49575a3a11018af8a079b695

    • SHA1

      b7c82e18b683939dff6891a9e3afe3f97275ed31

    • SHA256

      bb4a53733f0033eb457acf98da3adcaed09328dbd37dd8991d788ae67187b33d

    • SHA512

      e9ec2ffdee94d0b66a7ccd0e01a187bdcc3fbd56d84835b4fb555797008e5891580da7ea1cbee1be38a6625850e23b433105cf6cc5b88d90b98a506a0da41a96

    • SSDEEP

      49152:hqe3f6RzyPE5oZPCpecWcNwDCEjqVX5rIJwI2J5PiH7nBGtY:4SiRzcSeCec/NwWEjgJLTiH7BUY

    Score
    8/10

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks