Overview

overview

7

Static

static

3

0f70aa4792...12.exe

windows7-x64

7

0f70aa4792...12.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    0f70aa47920eb58a085566a176585556aa8ba7a20093a8eae021f643e775b212

  • Size

    12KB

  • Sample

    240420-xdsmcsfe7v

  • MD5

    ca5d26edf6e7ff89481ea62dc2caeb8e

  • SHA1

    9a7b87ca52c33290b3ba82be0d7d35285efe2fa0

  • SHA256

    0f70aa47920eb58a085566a176585556aa8ba7a20093a8eae021f643e775b212

  • SHA512

    52dc39dfda468124e206459d80bc6acaefd6d98b7b3858f0ed4c82566e590d98a11913f079166a517ebe41e7618f0946de29518dd163d86b3e8fdaf88292c1cb

  • SSDEEP

    384:PL7li/2z9q2DcEQvdhcJKLTp/NK9xajx:jFM/Q9cjx

Score
7/10

Malware Config

Targets

    • Target

      0f70aa47920eb58a085566a176585556aa8ba7a20093a8eae021f643e775b212

    • Size

      12KB

    • MD5

      ca5d26edf6e7ff89481ea62dc2caeb8e

    • SHA1

      9a7b87ca52c33290b3ba82be0d7d35285efe2fa0

    • SHA256

      0f70aa47920eb58a085566a176585556aa8ba7a20093a8eae021f643e775b212

    • SHA512

      52dc39dfda468124e206459d80bc6acaefd6d98b7b3858f0ed4c82566e590d98a11913f079166a517ebe41e7618f0946de29518dd163d86b3e8fdaf88292c1cb

    • SSDEEP

      384:PL7li/2z9q2DcEQvdhcJKLTp/NK9xajx:jFM/Q9cjx

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks