Overview

overview

8

Static

static

3

7a53b1e563...5f.exe

windows7-x64

8

7a53b1e563...5f.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    7a53b1e5631a9db82b04e3d72368765f

  • Size

    79KB

  • Sample

    240127-qa5n7acfe5

  • MD5

    7a53b1e5631a9db82b04e3d72368765f

  • SHA1

    bb5f7b6e9870d55f4c61a5306c05f72522632a69

  • SHA256

    e054d20c3cd364eee6b948f225d910e7033471151221780e866e8d4454c5137a

  • SHA512

    9b56c4dca49973a3a06ea923ff556b597f02bb35ffd093bd7338973d166f99fd728dcda4ec02e2c7ba652653b1cb63d9dab8796e1db7f9ba5be82c6301a66f71

  • SSDEEP

    1536:CCLMjSxjEMxTVZZ9zxH7XvwSpvPxaMlMQAES/hXikzCWNY09Aa:CCQjLQhZXRrP3MhZ/IkzxP9

Score
8/10
persistence

Malware Config

Targets

    • Target

      7a53b1e5631a9db82b04e3d72368765f

    • Size

      79KB

    • MD5

      7a53b1e5631a9db82b04e3d72368765f

    • SHA1

      bb5f7b6e9870d55f4c61a5306c05f72522632a69

    • SHA256

      e054d20c3cd364eee6b948f225d910e7033471151221780e866e8d4454c5137a

    • SHA512

      9b56c4dca49973a3a06ea923ff556b597f02bb35ffd093bd7338973d166f99fd728dcda4ec02e2c7ba652653b1cb63d9dab8796e1db7f9ba5be82c6301a66f71

    • SSDEEP

      1536:CCLMjSxjEMxTVZZ9zxH7XvwSpvPxaMlMQAES/hXikzCWNY09Aa:CCQjLQhZXRrP3MhZ/IkzxP9

    Score
    8/10
    persistence

    • Modifies AppInit DLL entries

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks