Overview

overview

8

Static

static

3

896e63088f...b5.exe

windows7-x64

8

896e63088f...b5.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    896e63088f12322630e42203d50229b5

  • Size

    114KB

  • Sample

    240202-nynpgafcam

  • MD5

    896e63088f12322630e42203d50229b5

  • SHA1

    0daeb05ca0ade37a023b47e51ce9de4d28f8247a

  • SHA256

    bdd5affb9efc1b6f4b7eb8c2c318abe87a86669202d3aa5a98d015347f677307

  • SHA512

    2f2b943b050a090bb1a42995730df5309959912e819455a23568fd79a662090eb51e737f09e10a18456be508e36392368ce267fb96aca8321410c67b527b61a5

  • SSDEEP

    3072:d5TPKAnytiTIiTFmUth77xYTe3g2ZmiSFrSP:3iAMiUArhXnge

Score
8/10
persistence

Malware Config

Targets

    • Target

      896e63088f12322630e42203d50229b5

    • Size

      114KB

    • MD5

      896e63088f12322630e42203d50229b5

    • SHA1

      0daeb05ca0ade37a023b47e51ce9de4d28f8247a

    • SHA256

      bdd5affb9efc1b6f4b7eb8c2c318abe87a86669202d3aa5a98d015347f677307

    • SHA512

      2f2b943b050a090bb1a42995730df5309959912e819455a23568fd79a662090eb51e737f09e10a18456be508e36392368ce267fb96aca8321410c67b527b61a5

    • SSDEEP

      3072:d5TPKAnytiTIiTFmUth77xYTe3g2ZmiSFrSP:3iAMiUArhXnge

    Score
    8/10
    persistence

    • Modifies AppInit DLL entries

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks