Overview

overview

7

Static

static

1

desktop-20a11ho.lnk

windows7-x64

3

desktop-20a11ho.lnk

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    desktop-20a11ho.lnk

  • Size

    3KB

  • Sample

    240413-v9zz7sac4t

  • MD5

    cd4f87e63be918ec6ef8d39082669834

  • SHA1

    77a144bb45fff156050324b8318741bcae27d9f8

  • SHA256

    a6d995d015c16985b456bcc5cd44377c3e5e5cf72b17771eadc51e1d02a3c6ef

  • SHA512

    877e9c3d0157db9c73729f94155cf6481257d6f64dbe564678cc1e35f471b20434fa27ef901b3c1b103fd4d6b715e906fe641faba6c3e9709caf05175de0e1c2

Score
7/10

Malware Config

Targets

    • Target

      desktop-20a11ho.lnk

    • Size

      3KB

    • MD5

      cd4f87e63be918ec6ef8d39082669834

    • SHA1

      77a144bb45fff156050324b8318741bcae27d9f8

    • SHA256

      a6d995d015c16985b456bcc5cd44377c3e5e5cf72b17771eadc51e1d02a3c6ef

    • SHA512

      877e9c3d0157db9c73729f94155cf6481257d6f64dbe564678cc1e35f471b20434fa27ef901b3c1b103fd4d6b715e906fe641faba6c3e9709caf05175de0e1c2

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks