Overview

overview

7

Static

static

3

7117fb7f3e...cf.exe

windows7-x64

6

7117fb7f3e...cf.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    7117fb7f3e5f302d0d0132000ef0c1cf

  • Size

    72KB

  • Sample

    240124-bzbp3sfadm

  • MD5

    7117fb7f3e5f302d0d0132000ef0c1cf

  • SHA1

    d32bc846df7af301cc6c19401c8b9716d8e90b54

  • SHA256

    1feecff72590e5f68fc21a58ecad9fd58a598b0dd26879addb5f5749128cebe1

  • SHA512

    613e131c42a20e2298ebed0d545877fa2ab22b957156598b0b7090d22a2e88cff6ce0cc6a03de0368db79bafa14ea23e7c7dd3e62e962427def33440677ee17a

  • SSDEEP

    1536:iWVXfnjzN9lt1bjVdOfHb09qwtRrobxdwMX+ipBzO:iWVXfnjzN9lt1bjVds70VtRc9dL3pBy

Score
7/10
persistence

Malware Config

Targets

    • Target

      7117fb7f3e5f302d0d0132000ef0c1cf

    • Size

      72KB

    • MD5

      7117fb7f3e5f302d0d0132000ef0c1cf

    • SHA1

      d32bc846df7af301cc6c19401c8b9716d8e90b54

    • SHA256

      1feecff72590e5f68fc21a58ecad9fd58a598b0dd26879addb5f5749128cebe1

    • SHA512

      613e131c42a20e2298ebed0d545877fa2ab22b957156598b0b7090d22a2e88cff6ce0cc6a03de0368db79bafa14ea23e7c7dd3e62e962427def33440677ee17a

    • SSDEEP

      1536:iWVXfnjzN9lt1bjVdOfHb09qwtRrobxdwMX+ipBzO:iWVXfnjzN9lt1bjVds70VtRc9dL3pBy

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks