Overview

overview

8

Static

static

3

9617c585e5...0e.exe

windows7-x64

8

9617c585e5...0e.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9617c585e591d0a73774475b0d16bd0e

  • Size

    17KB

  • Sample

    240212-dplhmsbf3s

  • MD5

    9617c585e591d0a73774475b0d16bd0e

  • SHA1

    599f3718cab9cb6c8c756022047f3ad01b1c3bdc

  • SHA256

    2e93d907689a41e83bf73831cffddf77323de789fa271bccc966136204858197

  • SHA512

    f240a089f907f42614fcb382002fd518678e8c7a6ced87edf3e11af825b988b695faf9a75531fdf0b8916d01ccd8409bb3d9765a524078f472b65dc8478ae049

  • SSDEEP

    384:YFRU2QatcmZO2Zp+Nye8pqrmub8TyztsDN:YLIatoKK8o8TyJc

Score
8/10
persistence

Malware Config

Targets

    • Target

      9617c585e591d0a73774475b0d16bd0e

    • Size

      17KB

    • MD5

      9617c585e591d0a73774475b0d16bd0e

    • SHA1

      599f3718cab9cb6c8c756022047f3ad01b1c3bdc

    • SHA256

      2e93d907689a41e83bf73831cffddf77323de789fa271bccc966136204858197

    • SHA512

      f240a089f907f42614fcb382002fd518678e8c7a6ced87edf3e11af825b988b695faf9a75531fdf0b8916d01ccd8409bb3d9765a524078f472b65dc8478ae049

    • SSDEEP

      384:YFRU2QatcmZO2Zp+Nye8pqrmub8TyztsDN:YLIatoKK8o8TyJc

    Score
    8/10
    persistence

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks