Overview

overview

8

Static

static

1

ва.txt

windows10-1703-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ва.txt

  • Size

    1KB

  • Sample

    240204-wsjgkafgg8

  • MD5

    d7700a2064e24aa15ed6eff834a0b30f

  • SHA1

    e0c32082c913a9505e9715c06ceef2d9c7661142

  • SHA256

    7267a08112fb350eb8a635fa17ea86e1dbcf7d55d59709cca2417e2c247d9470

  • SHA512

    5db898f12c7f9ab4886b036e8119472b240c95db9a27dfaf84957e07613a3fc91fa7ef1450669ca800af3c487f50c89dd17198ae620bbd9d0c635b0ce4de3cd3

Score
8/10
discovery

Malware Config

Targets

    • Target

      ва.txt

    • Size

      1KB

    • MD5

      d7700a2064e24aa15ed6eff834a0b30f

    • SHA1

      e0c32082c913a9505e9715c06ceef2d9c7661142

    • SHA256

      7267a08112fb350eb8a635fa17ea86e1dbcf7d55d59709cca2417e2c247d9470

    • SHA512

      5db898f12c7f9ab4886b036e8119472b240c95db9a27dfaf84957e07613a3fc91fa7ef1450669ca800af3c487f50c89dd17198ae620bbd9d0c635b0ce4de3cd3

    Score
    8/10
    discovery

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks