Overview

overview

7

Static

static

3

Дивер...ar.scr

windows7-x64

7

Дивер...ar.scr

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    fbabc4e5a6470606fc64c39c182b5a7a71f8fa96f50c67725d52abf184f75fd4

  • Size

    1.8MB

  • Sample

    240410-sgj26sfd4w

  • MD5

    e4b54ee2f0068762179e7e514d90bf16

  • SHA1

    f3f68b4bfdeb4d4cae5e05b66ca9c93e02f467ea

  • SHA256

    fbabc4e5a6470606fc64c39c182b5a7a71f8fa96f50c67725d52abf184f75fd4

  • SHA512

    9d8ad4741a0e969ed10fc95bda1e13c8538cfe08a61fcf2d61d0dd1ad4bf0a8e6b987e22e6870b9b481b11bcc056d4cb6299dd0bf330cc30e3decbe469fabac8

  • SSDEEP

    49152:AMJT4D61AAiUCJuXaH2DL0Z7aLehKQhU2zktMLl1dbaP5e8MANQsCU:dTA/UOoaHF8iLUdtMlrbaP5e2N9

Score
7/10

Malware Config

Targets

    • Target

      Диверсанти file‮‮rar.scr

    • Size

      2.0MB

    • MD5

      bcdab4ae622811f699765bfb9cb909d2

    • SHA1

      04bc53294ed74b6630c20c02afbc97f2772e2e31

    • SHA256

      6149680c8541980d46c17681e37e4751e2baca1d13ee648b8188dfb24bf56f7c

    • SHA512

      16c4c6b8cd6b8bca380c743d614f54adf803ac2302c677347b9a984d7d5e9024deed11ebc6464414bcb09ae0d8ebcdea2991415fd42a61fe95f6f46dacee6fc7

    • SSDEEP

      49152:UbA30conkEwqU7XgaN2b2so1KkZzNNaixhpN:UbVRtYX1QCsYaix7N

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks