Overview

overview

8

Static

static

3

8fe5039983...a3.exe

windows7-x64

8

8fe5039983...a3.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    94a68d3c6eb9c2b2ece126f6dbb1b30861f0d7b7bbe85da5bc8968dd727b84cb

  • Size

    854KB

  • Sample

    240417-rehkwsba88

  • MD5

    b986ad10089e07978ea29bc3aedc8feb

  • SHA1

    faa98a4f739f6d9785d4ba520b9470dd10aadc06

  • SHA256

    94a68d3c6eb9c2b2ece126f6dbb1b30861f0d7b7bbe85da5bc8968dd727b84cb

  • SHA512

    dc8cd515f8f38425f3f2e5a161aa12c8f606933b98647d9bc4dcbdb360890aeaad9a934294d3d668a16ec2ce7bc6c2725d7c0a967c2d199481a5dc3d20b39c7e

  • SSDEEP

    24576:gW8M7TqbwwQU79qUjYa+VfbTZv/9w8yHnBU7j3y:T8QHwQURLj1+D/q8SnBY3y

Score
8/10
evasion

Malware Config

Targets

    • Target

      8fe50399830e5677336e1f78d0bfad2975dc3704829f87ab3ede61d34de121a3.exe

    • Size

      971KB

    • MD5

      1f0c79dbe6a9f5e1e37f776d3c0a48b6

    • SHA1

      287e6e3d771f21c9587bf928c3b124539a847e0f

    • SHA256

      8fe50399830e5677336e1f78d0bfad2975dc3704829f87ab3ede61d34de121a3

    • SHA512

      dd9d9d442185d49f78c6dfd2508400890bd02b0e354b17138619daf9ebdb48c5381df2ea972e4cbca91fe5018ecc6c10c68e179b07001c656e5ac87df391f49e

    • SSDEEP

      24576:d2yQPFUF0b+E8Lez1zZS2TV81ym9kApS7ybubjKj+NsRD:dpASENh02w+A2SyWm6

    Score
    8/10
    evasion

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks