Overview

overview

7

Static

static

3

894c91db4b...72.exe

windows7-x64

6

894c91db4b...72.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    894c91db4b2b922399b3515c15152072.bin

  • Size

    106KB

  • Sample

    240314-djrsgabd72

  • MD5

    894c91db4b2b922399b3515c15152072

  • SHA1

    9f4ebd9c5259d41f8292c11d72e874d31f6bd636

  • SHA256

    dd88192abd03d0322ade99fd03a931b4ad88b67ed12d27166ac79f070a2e2626

  • SHA512

    38453143fbf69746802af02b1e17eb17980c78f93f16f29adb8a0a320a4665680f67b46eb96ad11dff5815664d123e78bb771cf98345dafbae2a07926e114fb7

  • SSDEEP

    3072:yNOlhUtO2aVYN4LWnGFxbQXknqN+Mvmb7s:OU2g04vFxbQXknqN+MOb

Score
7/10

Malware Config

Targets

    • Target

      894c91db4b2b922399b3515c15152072.bin

    • Size

      106KB

    • MD5

      894c91db4b2b922399b3515c15152072

    • SHA1

      9f4ebd9c5259d41f8292c11d72e874d31f6bd636

    • SHA256

      dd88192abd03d0322ade99fd03a931b4ad88b67ed12d27166ac79f070a2e2626

    • SHA512

      38453143fbf69746802af02b1e17eb17980c78f93f16f29adb8a0a320a4665680f67b46eb96ad11dff5815664d123e78bb771cf98345dafbae2a07926e114fb7

    • SSDEEP

      3072:yNOlhUtO2aVYN4LWnGFxbQXknqN+Mvmb7s:OU2g04vFxbQXknqN+MOb

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks