Overview

overview

7

Static

static

3

57cab8b5b7...18.exe

windows7-x64

7

57cab8b5b7...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    57cab8b5b79e3f3126e062692f23b5cdfcd7c6f1e98cee707a49db1945cd2a18

  • Size

    13.3MB

  • Sample

    240521-rqs6rsha22

  • MD5

    10a17654de3ae1614842bb13c811de0e

  • SHA1

    4aba2fbeabd42ba3d4eeab74257f91fd8208bedc

  • SHA256

    57cab8b5b79e3f3126e062692f23b5cdfcd7c6f1e98cee707a49db1945cd2a18

  • SHA512

    b1639ee4f96ea248d4ebf7944efdd63f95cc12eff06689cc47f2253eb05d0433ab485599afb34854378b34f215c96cb717e16daa157612bea25abe8aa653b8ea

  • SSDEEP

    196608:9eax9QYwH5fZ6kWyn1NwV3RhOuS2Kj7JFtyvZ68kk88t9FP/Kk3qZ+HxcvYHhY:f7QF6kWyn1anhOuS2Gk64dTFXKk3gCHO

Score
7/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      57cab8b5b79e3f3126e062692f23b5cdfcd7c6f1e98cee707a49db1945cd2a18

    • Size

      13.3MB

    • MD5

      10a17654de3ae1614842bb13c811de0e

    • SHA1

      4aba2fbeabd42ba3d4eeab74257f91fd8208bedc

    • SHA256

      57cab8b5b79e3f3126e062692f23b5cdfcd7c6f1e98cee707a49db1945cd2a18

    • SHA512

      b1639ee4f96ea248d4ebf7944efdd63f95cc12eff06689cc47f2253eb05d0433ab485599afb34854378b34f215c96cb717e16daa157612bea25abe8aa653b8ea

    • SSDEEP

      196608:9eax9QYwH5fZ6kWyn1NwV3RhOuS2Kj7JFtyvZ68kk88t9FP/Kk3qZ+HxcvYHhY:f7QF6kWyn1anhOuS2Gk64dTFXKk3gCHO

    Score
    7/10
    discoveryevasionpersistencetrojan

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks