Overview

overview

8

Static

static

3

winprofile

windows7-x64

8

winprofile

windows10-1703-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    ac8d45e6a98571d5d6c67f7b60cfdc84e2838f20d815d29e7a229539ab89c468

  • Size

    238KB

  • Sample

    240502-2csm7aab75

  • MD5

    f44bcedfb71262dd1484bcbb63122ba5

  • SHA1

    b528fc9a7053622bb1495a2d985dc72ef433417c

  • SHA256

    ac8d45e6a98571d5d6c67f7b60cfdc84e2838f20d815d29e7a229539ab89c468

  • SHA512

    d85b13c478dbced1fedffaa29701566afe2bbce53821983d6b29588f037bd00c6cf4b92c12bb23aa431d76b4000ab92d7f6e5527b57f8617860b4a4b7d2a579a

  • SSDEEP

    3072:rdwWsF1XDWLAlcqva7fvYnS4OVzX+V4V2h0:rPs/7y7qAzOV4V2h0

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      ac8d45e6a98571d5d6c67f7b60cfdc84e2838f20d815d29e7a229539ab89c468

    • Size

      238KB

    • MD5

      f44bcedfb71262dd1484bcbb63122ba5

    • SHA1

      b528fc9a7053622bb1495a2d985dc72ef433417c

    • SHA256

      ac8d45e6a98571d5d6c67f7b60cfdc84e2838f20d815d29e7a229539ab89c468

    • SHA512

      d85b13c478dbced1fedffaa29701566afe2bbce53821983d6b29588f037bd00c6cf4b92c12bb23aa431d76b4000ab92d7f6e5527b57f8617860b4a4b7d2a579a

    • SSDEEP

      3072:rdwWsF1XDWLAlcqva7fvYnS4OVzX+V4V2h0:rPs/7y7qAzOV4V2h0

    Score
    8/10
    discoverypersistence

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks