Overview

overview

8

Static

static

3

bb8792e7b2...9c.exe

windows7-x64

8

bb8792e7b2...9c.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bb8792e7b2a163f94c4a5e8f111ed19c

  • Size

    17KB

  • Sample

    240308-r54wtaae2t

  • MD5

    bb8792e7b2a163f94c4a5e8f111ed19c

  • SHA1

    5e0198a1d1f39f4ef6b55aab9a70c7d03874a862

  • SHA256

    c53f25c04ca7d178971613b48445e6c0df4e157a327017a710677d8c6d6e816c

  • SHA512

    f5a1cfaa784ad384bafbe36309e9ed54ce93790c5483b883c04c459f4b626247c9fc8bca174fc7d2daa4117694b1ebcd0bd48a2b9a5d934914f23527def6a05f

  • SSDEEP

    384:FFdL5o7QIcmZO2Zp+Nye8pqrmub8TyztsDN:FzgQIoKK8o8TyJc

Score
8/10
persistence

Malware Config

Targets

    • Target

      bb8792e7b2a163f94c4a5e8f111ed19c

    • Size

      17KB

    • MD5

      bb8792e7b2a163f94c4a5e8f111ed19c

    • SHA1

      5e0198a1d1f39f4ef6b55aab9a70c7d03874a862

    • SHA256

      c53f25c04ca7d178971613b48445e6c0df4e157a327017a710677d8c6d6e816c

    • SHA512

      f5a1cfaa784ad384bafbe36309e9ed54ce93790c5483b883c04c459f4b626247c9fc8bca174fc7d2daa4117694b1ebcd0bd48a2b9a5d934914f23527def6a05f

    • SSDEEP

      384:FFdL5o7QIcmZO2Zp+Nye8pqrmub8TyztsDN:FzgQIoKK8o8TyJc

    Score
    8/10
    persistence

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks