Overview

overview

7

Static

static

3

d45cec72c8...42.exe

windows7-x64

7

d45cec72c8...42.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d45cec72c8b1652cba1552abc7fc9542

  • Size

    2.0MB

  • Sample

    240318-ygme7ahd4t

  • MD5

    d45cec72c8b1652cba1552abc7fc9542

  • SHA1

    a4ab9197fd4dc9e667464c4c299babe1120639d5

  • SHA256

    40b7114aed93879928adec8a4921d9003f0a21cf4d7190b99f85e73871218c6a

  • SHA512

    a437e5b30e72bf8fc889a5800ba57edad09edf77ba73a8df69f66a8024656db030129465a87498f400764837903a8d0b5fb11e228baaae1800498368f2bc474c

  • SSDEEP

    49152:rlcxRmQwzMl6k1z/Axiztg5egr6c52J0xIlTnkzNEF8U2:rlzQwAdmx5egucX0qNe2

Score
7/10

Malware Config

Targets

    • Target

      d45cec72c8b1652cba1552abc7fc9542

    • Size

      2.0MB

    • MD5

      d45cec72c8b1652cba1552abc7fc9542

    • SHA1

      a4ab9197fd4dc9e667464c4c299babe1120639d5

    • SHA256

      40b7114aed93879928adec8a4921d9003f0a21cf4d7190b99f85e73871218c6a

    • SHA512

      a437e5b30e72bf8fc889a5800ba57edad09edf77ba73a8df69f66a8024656db030129465a87498f400764837903a8d0b5fb11e228baaae1800498368f2bc474c

    • SSDEEP

      49152:rlcxRmQwzMl6k1z/Axiztg5egr6c52J0xIlTnkzNEF8U2:rlzQwAdmx5egucX0qNe2

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks