Overview

overview

7

Static

static

3

HEUR-Trojan.Win32.exe

windows7-x64

7

HEUR-Trojan.Win32.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    HEUR-Trojan.Win32.Generic-efba8850adf7cd6aa476585eb70330506de3f9b9817239ec25f0bc5b85b49750

  • Size

    208KB

  • Sample

    240229-jzj1fsba8x

  • MD5

    1682a7bc024314ba6550d944b8e4619d

  • SHA1

    e644d8becdc86043f4ddf26dee365b5923c9c751

  • SHA256

    efba8850adf7cd6aa476585eb70330506de3f9b9817239ec25f0bc5b85b49750

  • SHA512

    42c31307616fb8418edef3e774a525c7fd7dc45c5b141e7675dc7aa2944a28566828f86288ef493dc2bdc350986df43b6f33e47591c0bef48f9743c5fb143aff

  • SSDEEP

    6144:G+SV/GL9IdslNuVJJf95+F8y9e/fSltQEj:/nL9IdMNIPX+F8y9e/fKQ

Score
7/10

Malware Config

Targets

    • Target

      HEUR-Trojan.Win32.Generic-efba8850adf7cd6aa476585eb70330506de3f9b9817239ec25f0bc5b85b49750

    • Size

      208KB

    • MD5

      1682a7bc024314ba6550d944b8e4619d

    • SHA1

      e644d8becdc86043f4ddf26dee365b5923c9c751

    • SHA256

      efba8850adf7cd6aa476585eb70330506de3f9b9817239ec25f0bc5b85b49750

    • SHA512

      42c31307616fb8418edef3e774a525c7fd7dc45c5b141e7675dc7aa2944a28566828f86288ef493dc2bdc350986df43b6f33e47591c0bef48f9743c5fb143aff

    • SSDEEP

      6144:G+SV/GL9IdslNuVJJf95+F8y9e/fSltQEj:/nL9IdMNIPX+F8y9e/fKQ

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks