Overview

overview

8

Static

static

3

espinior.exe

windows7-x64

8

espinior.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    espinior.exe

  • Size

    904KB

  • Sample

    240406-pk4dfaab5y

  • MD5

    dda215e4c93c5bcd1626d798a9114052

  • SHA1

    686205c045db9236cb7a76cc48a4759f3a775bed

  • SHA256

    786c781885708a2dd6f66a997cda19fa13f06542a1c5f35c50619494d45d2cb9

  • SHA512

    e92305408df77d52e506aa4b4a40f0dcb7c77cd54ba6201d98c210db6ec1df61dc4fd5193f6cbd59c1ce83f6da771c0f97facf976d99b79473148f32424c55ca

  • SSDEEP

    24576:qEI9/9HoYVM+ptl7ho60OegX7AoCnhIaXnMvQoT:K/9DPdf0ErvCnhI

Score
8/10
persistence

Malware Config

Targets

    • Target

      espinior.exe

    • Size

      904KB

    • MD5

      dda215e4c93c5bcd1626d798a9114052

    • SHA1

      686205c045db9236cb7a76cc48a4759f3a775bed

    • SHA256

      786c781885708a2dd6f66a997cda19fa13f06542a1c5f35c50619494d45d2cb9

    • SHA512

      e92305408df77d52e506aa4b4a40f0dcb7c77cd54ba6201d98c210db6ec1df61dc4fd5193f6cbd59c1ce83f6da771c0f97facf976d99b79473148f32424c55ca

    • SSDEEP

      24576:qEI9/9HoYVM+ptl7ho60OegX7AoCnhIaXnMvQoT:K/9DPdf0ErvCnhI

    Score
    8/10
    persistence

    • Sets service image path in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks