Overview

overview

8

Static

static

3

be98ac6412...3b.exe

windows7-x64

8

be98ac6412...3b.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    be98ac6412a72807cd8720c197c12b3b

  • Size

    130KB

  • Sample

    240409-3b1g3shd89

  • MD5

    be98ac6412a72807cd8720c197c12b3b

  • SHA1

    2dfb4254593f93f0b1212eb445d1394929ff3e8f

  • SHA256

    a5d3fd5ce0ddfb1d038a1b923d82e76dd24c3ccbf4cba9a710fbeb59037d6695

  • SHA512

    689b2ce963f43cdeb7d11952cafefa610edd66c275800abc5b1aa8845ee94042ca257f797bf244085e4bd821521271d86094f852bda53f9606cb710ff8fee833

  • SSDEEP

    3072:sr+Fu2II+HiXMcI/AKJZ7vV9d300JKML5pbHRHKr+FuqII+H3:/MHD3/AKz7vV9zJKML5pbHPMH3

Score
8/10

Malware Config

Targets

    • Target

      be98ac6412a72807cd8720c197c12b3b

    • Size

      130KB

    • MD5

      be98ac6412a72807cd8720c197c12b3b

    • SHA1

      2dfb4254593f93f0b1212eb445d1394929ff3e8f

    • SHA256

      a5d3fd5ce0ddfb1d038a1b923d82e76dd24c3ccbf4cba9a710fbeb59037d6695

    • SHA512

      689b2ce963f43cdeb7d11952cafefa610edd66c275800abc5b1aa8845ee94042ca257f797bf244085e4bd821521271d86094f852bda53f9606cb710ff8fee833

    • SSDEEP

      3072:sr+Fu2II+HiXMcI/AKJZ7vV9d300JKML5pbHRHKr+FuqII+H3:/MHD3/AKz7vV9zJKML5pbHPMH3

    Score
    8/10

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks