Overview

overview

8

Static

static

3

Shwdox-spoofer.rar

windows10-2004-x64

8

Resubmissions

19/02/2024, 16:47

240219-vahxmsge4z 8

Sharing

Copy URL Twitter E-mail

General

  • Target

    Shwdox-spoofer.rar

  • Size

    99KB

  • Sample

    240219-vahxmsge4z

  • MD5

    a7ac6a2511db2a15c321219aabd1ff0f

  • SHA1

    6b20f9b222bdc889e8abc81bfbd8e4c82a601797

  • SHA256

    32572d412a007a387a2dcdeb1904f7cff178a59092147711325acde118657939

  • SHA512

    c20d4c5f8203492fac4d040c552ff1692d032f291e166db0cb33752b761413fab020a39ac95d0b49f60a63044acc9296faff6274b83775985acdaf35223b9959

  • SSDEEP

    1536:+328l1mgAO37pfThdSVZxaOCVbjMZOPquVJqXpQbKUzPsU9P:+G8l1md67pEZgpN4Zocpc/p

Score
8/10
persistence

Malware Config

Targets

    • Target

      Shwdox-spoofer.rar

    • Size

      99KB

    • MD5

      a7ac6a2511db2a15c321219aabd1ff0f

    • SHA1

      6b20f9b222bdc889e8abc81bfbd8e4c82a601797

    • SHA256

      32572d412a007a387a2dcdeb1904f7cff178a59092147711325acde118657939

    • SHA512

      c20d4c5f8203492fac4d040c552ff1692d032f291e166db0cb33752b761413fab020a39ac95d0b49f60a63044acc9296faff6274b83775985acdaf35223b9959

    • SSDEEP

      1536:+328l1mgAO37pfThdSVZxaOCVbjMZOPquVJqXpQbKUzPsU9P:+G8l1md67pEZgpN4Zocpc/p

    Score
    8/10
    persistence

    • Sets service image path in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks