Overview

overview

7

Static

static

3

ab419c35e2...90.exe

windows7-x64

7

ab419c35e2...90.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ab419c35e2a50e4714e01840b84de85e58283accd8c572981b90e8a5f5784090

  • Size

    1.1MB

  • Sample

    240411-bzwegsbh5w

  • MD5

    d3231df0545188a46c8b9bab49741b44

  • SHA1

    2cc77a5b6eaaf1da3c1953398dec1deafe421336

  • SHA256

    ab419c35e2a50e4714e01840b84de85e58283accd8c572981b90e8a5f5784090

  • SHA512

    617eac2e15d91df08e3082f8114243c81c54864e60e6089b47aeaa946ca0531dba40320aa877b92e42d367f56ad0784f83a400fdef5839377a7a07439e6e715c

  • SSDEEP

    24576:WZgKN5qddokz0A1bPZcrtosfNNY3sSExHMCP:WZgvvokzV1Fcr9fNNls

Score
7/10
persistence

Malware Config

Targets

    • Target

      ab419c35e2a50e4714e01840b84de85e58283accd8c572981b90e8a5f5784090

    • Size

      1.1MB

    • MD5

      d3231df0545188a46c8b9bab49741b44

    • SHA1

      2cc77a5b6eaaf1da3c1953398dec1deafe421336

    • SHA256

      ab419c35e2a50e4714e01840b84de85e58283accd8c572981b90e8a5f5784090

    • SHA512

      617eac2e15d91df08e3082f8114243c81c54864e60e6089b47aeaa946ca0531dba40320aa877b92e42d367f56ad0784f83a400fdef5839377a7a07439e6e715c

    • SSDEEP

      24576:WZgKN5qddokz0A1bPZcrtosfNNY3sSExHMCP:WZgvvokzV1Fcr9fNNls

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks