Overview

overview

7

Static

static

3

3321057cb2...96.exe

windows7-x64

7

3321057cb2...96.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3321057cb281adf6eaa8ecd5bd88cc3232a174fa464ca2cf141ed80e39d61496

  • Size

    289KB

  • Sample

    240420-zhkteshe23

  • MD5

    d8d438c89fce6e7114c3e8ec9c12872b

  • SHA1

    7ef91106136756d91b9f74ff8ad04379bdb31842

  • SHA256

    3321057cb281adf6eaa8ecd5bd88cc3232a174fa464ca2cf141ed80e39d61496

  • SHA512

    6d152c2dc6c79543f21331a4916f754c9ea7c0c5cda70102736bac5386b6674d4522e7d320c36fa6abc49e8626432e268bc17eab34f508d297ae20e88448176d

  • SSDEEP

    6144:80W6tQl9eaRjb9kdhqZSqCqtsgdKaxkECzJLaQVbU5:80WYQLeaReDqN/KaxklJLJbU5

Score
7/10

Malware Config

Targets

    • Target

      3321057cb281adf6eaa8ecd5bd88cc3232a174fa464ca2cf141ed80e39d61496

    • Size

      289KB

    • MD5

      d8d438c89fce6e7114c3e8ec9c12872b

    • SHA1

      7ef91106136756d91b9f74ff8ad04379bdb31842

    • SHA256

      3321057cb281adf6eaa8ecd5bd88cc3232a174fa464ca2cf141ed80e39d61496

    • SHA512

      6d152c2dc6c79543f21331a4916f754c9ea7c0c5cda70102736bac5386b6674d4522e7d320c36fa6abc49e8626432e268bc17eab34f508d297ae20e88448176d

    • SSDEEP

      6144:80W6tQl9eaRjb9kdhqZSqCqtsgdKaxkECzJLaQVbU5:80WYQLeaReDqN/KaxklJLJbU5

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks