Overview

overview

7

Static

static

3

b64a84d1f8...53.exe

windows7-x64

7

b64a84d1f8...53.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b64a84d1f88e4e78464a1901c1cb5bbd5f00bb73203d719e64e072157a087b53.exe

  • Size

    106KB

  • Sample

    240407-bpyrvsha21

  • MD5

    fe380780b5c35bd6d54541791151c2be

  • SHA1

    7fe3a583cf91474c733f85cebf3c857682e269e1

  • SHA256

    b64a84d1f88e4e78464a1901c1cb5bbd5f00bb73203d719e64e072157a087b53

  • SHA512

    ba05ba8aa13c4bc1cf98fbf6c08b021e8b19354098e0397fc8e1e5d3dcce367c1063203f24e50d0973193f6535681d0a43486e5dade5d112853b7a2fe8739b6c

  • SSDEEP

    1536:lIpbrxKOcuS11Phbiyn2TCdfGyJVGJkyrt517EwM+UPpe5xKOcuS11Phbiyn2TCf:KpbrsISnRGPJkGt74GsISnRF

Score
7/10

Malware Config

Targets

    • Target

      b64a84d1f88e4e78464a1901c1cb5bbd5f00bb73203d719e64e072157a087b53.exe

    • Size

      106KB

    • MD5

      fe380780b5c35bd6d54541791151c2be

    • SHA1

      7fe3a583cf91474c733f85cebf3c857682e269e1

    • SHA256

      b64a84d1f88e4e78464a1901c1cb5bbd5f00bb73203d719e64e072157a087b53

    • SHA512

      ba05ba8aa13c4bc1cf98fbf6c08b021e8b19354098e0397fc8e1e5d3dcce367c1063203f24e50d0973193f6535681d0a43486e5dade5d112853b7a2fe8739b6c

    • SSDEEP

      1536:lIpbrxKOcuS11Phbiyn2TCdfGyJVGJkyrt517EwM+UPpe5xKOcuS11Phbiyn2TCf:KpbrsISnRGPJkGt74GsISnRF

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Remote System Discovery

1
T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks