Overview

overview

8

Static

static

3

a9d64a091e...3d.exe

windows7-x64

8

a9d64a091e...3d.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    a9d64a091efc3f90c1a8387ca561e23d

  • Size

    17KB

  • Sample

    240227-wyl5msgc7z

  • MD5

    a9d64a091efc3f90c1a8387ca561e23d

  • SHA1

    62ff5868f8a5668c3c3c09d6bd5a12a931d84a41

  • SHA256

    1f099ce771c4b184c03514d13161fdc11f7e733c2788d8d83d687a7be6eca924

  • SHA512

    7c89937826ea7cde48e7892f7eb0d53111e75bd00cc17f7de1853f7a9f411d8ee53d7fe323b3a9b92cbec5a7492c12f88c7669724a506c379458c71782282e7b

  • SSDEEP

    384:Q6mTF4kbeoLcoXUf+85hdkkIGDEhGMzqPJwRTvm:Qnekbe0Xi+cLkkVOzqPSRLm

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      a9d64a091efc3f90c1a8387ca561e23d

    • Size

      17KB

    • MD5

      a9d64a091efc3f90c1a8387ca561e23d

    • SHA1

      62ff5868f8a5668c3c3c09d6bd5a12a931d84a41

    • SHA256

      1f099ce771c4b184c03514d13161fdc11f7e733c2788d8d83d687a7be6eca924

    • SHA512

      7c89937826ea7cde48e7892f7eb0d53111e75bd00cc17f7de1853f7a9f411d8ee53d7fe323b3a9b92cbec5a7492c12f88c7669724a506c379458c71782282e7b

    • SSDEEP

      384:Q6mTF4kbeoLcoXUf+85hdkkIGDEhGMzqPJwRTvm:Qnekbe0Xi+cLkkVOzqPSRLm

    Score
    8/10
    evasionpersistence

    • Stops running service(s)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks