b4fd39b6b00d72034fe303bffa58d8bfd1e6c4631ae9ee9cb7a011cdb3dc6538 | Triage

Submit
Reports

Overview

overview

Static

static

b4fd39b6b0...38.exe

windows7-x64

9

b4fd39b6b0...38.exe

windows10-2004-x64

9

Sharing

General

Target

b4fd39b6b00d72034fe303bffa58d8bfd1e6c4631ae9ee9cb7a011cdb3dc6538
Size

65KB
Sample

240501-ctwnqsfg82
MD5

467ec21e6e8272654dfc49b608f79929
SHA1

cbc0de01c56bd61dec046e1e488adc4913543281
SHA256

b4fd39b6b00d72034fe303bffa58d8bfd1e6c4631ae9ee9cb7a011cdb3dc6538
SHA512

a707851550c64f702fc7ac9d83b7c6b8f3b260d7a65c740a870582efe23ec3c16dfae1e3a280c17d2f1cbd2654c99b3ffcac2639ad2f05fbd32516fa1d7451d1
SSDEEP

768:ZrItKyw5WHXfQIhIiIk9ecAaVPD96KyX67:Zr3Z5IfQIR81ad5yX67

Score

10^/10

evasion

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

b4fd39b6b00d72034fe303bffa58d8bfd1e6c4631ae9ee9cb7a011cdb3dc6538.exe

Resource

win7-20231129-en

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

b4fd39b6b00d72034fe303bffa58d8bfd1e6c4631ae9ee9cb7a011cdb3dc6538.exe

Resource

win10v2004-20240419-en

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  b4fd39b6b00d72034fe303bffa58d8bfd1e6c4631ae9ee9cb7a011cdb3dc6538
- Size
  
  65KB
- MD5
  
  467ec21e6e8272654dfc49b608f79929
- SHA1
  
  cbc0de01c56bd61dec046e1e488adc4913543281
- SHA256
  
  b4fd39b6b00d72034fe303bffa58d8bfd1e6c4631ae9ee9cb7a011cdb3dc6538
- SHA512
  
  a707851550c64f702fc7ac9d83b7c6b8f3b260d7a65c740a870582efe23ec3c16dfae1e3a280c17d2f1cbd2654c99b3ffcac2639ad2f05fbd32516fa1d7451d1
- SSDEEP
  
  768:ZrItKyw5WHXfQIhIiIk9ecAaVPD96KyX67:Zr3Z5IfQIR81ad5yX67
Score

9^/10

evasion
- Detects Windows executables referencing non-Windows User-Agents
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2024

Terms | Privacy