Overview

overview

9

Static

static

3

8d06422e84...d1.exe

windows7-x64

9

8d06422e84...d1.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    8d06422e84184ba0a6a20a12e4fe75b09db8286f2862c971d25bc243699955d1.exe

  • Size

    958KB

  • Sample

    240509-b69kpaec62

  • MD5

    60919367b965fdc16bd176e18f55f4bc

  • SHA1

    f67b7b203b5c320ea99b2c124d2cda275f396606

  • SHA256

    8d06422e84184ba0a6a20a12e4fe75b09db8286f2862c971d25bc243699955d1

  • SHA512

    2360f54602986c38c135f25de769f520d781a08f5751cbc99f9f5e31c2c462f7c028a36ec87033eb42466cff571b475648398bfbebeafadaf2240824d08d55ae

  • SSDEEP

    24576:qP6D4rOjZA603JlKvy7StXz7Y4uRV/4ucN+Kwyecj+rMrfdf8GbrfdYujvWw6nCS:FMi6wq+kV4Ll

Score
9/10
execution

Malware Config

Targets

    • Target

      8d06422e84184ba0a6a20a12e4fe75b09db8286f2862c971d25bc243699955d1.exe

    • Size

      958KB

    • MD5

      60919367b965fdc16bd176e18f55f4bc

    • SHA1

      f67b7b203b5c320ea99b2c124d2cda275f396606

    • SHA256

      8d06422e84184ba0a6a20a12e4fe75b09db8286f2862c971d25bc243699955d1

    • SHA512

      2360f54602986c38c135f25de769f520d781a08f5751cbc99f9f5e31c2c462f7c028a36ec87033eb42466cff571b475648398bfbebeafadaf2240824d08d55ae

    • SSDEEP

      24576:qP6D4rOjZA603JlKvy7StXz7Y4uRV/4ucN+Kwyecj+rMrfdf8GbrfdYujvWw6nCS:FMi6wq+kV4Ll

    Score
    9/10
    execution

    • Detects executables packed with SmartAssembly

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks