Overview

overview

10

Static

static

3

b8c1fa7b9f...de.exe

windows7-x64

10

b8c1fa7b9f...de.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b8c1fa7b9f8818580e6531103672dade

  • Size

    152KB

  • Sample

    240307-py4w5acc5y

  • MD5

    b8c1fa7b9f8818580e6531103672dade

  • SHA1

    83e19142d500dca959dfd159c33ee857df953fe5

  • SHA256

    d59673c999f3f442f8e3408400e963f96c0ff441b9478e90a86026de41a9e487

  • SHA512

    b3b05f1cdc44c84416a122bbde77c1de5b4e3d41a71d3883c10fcf851edd3a33c755ec9f648930ee953192f1581f4c55f3e1127ccdd404596f0529b8316e7369

  • SSDEEP

    3072:UpNlV8gSvbLlf+U704ChxTQqh7/28guGE0ocENjMdr:UpNlVIlGd4CFh7/28gUQ

Score
10/10
persistence

Malware Config

Targets

    • Target

      b8c1fa7b9f8818580e6531103672dade

    • Size

      152KB

    • MD5

      b8c1fa7b9f8818580e6531103672dade

    • SHA1

      83e19142d500dca959dfd159c33ee857df953fe5

    • SHA256

      d59673c999f3f442f8e3408400e963f96c0ff441b9478e90a86026de41a9e487

    • SHA512

      b3b05f1cdc44c84416a122bbde77c1de5b4e3d41a71d3883c10fcf851edd3a33c755ec9f648930ee953192f1581f4c55f3e1127ccdd404596f0529b8316e7369

    • SSDEEP

      3072:UpNlV8gSvbLlf+U704ChxTQqh7/28guGE0ocENjMdr:UpNlVIlGd4CFh7/28gUQ

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks