Overview

overview

7

Static

static

3

a69ff0e692...57.exe

windows7-x64

7

a69ff0e692...57.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17328934853.zip

  • Size

    1.2MB

  • Sample

    240522-3en88ada7w

  • MD5

    b0eb12dea780b8a944d67531258e81e9

  • SHA1

    7fe41014386283ac16a07da190df9919babc73fc

  • SHA256

    1dbe36e729f1e91cb35af05a0b4c7d48843341ef0a4e5a9bce0dc2876273dbad

  • SHA512

    3f77db9d6d3d3f61b193ed7830b579f945af4df8f3181794dc9b4cdd15292dda7bd3a0d181651721adaa31f827843ef774d5bc08852499d25463d69ecf6cbd95

  • SSDEEP

    24576:HDwoa1UkgGj8W8qmYawH+hUdqRPfKvCJ2eqMrmFm5k2T+IWn9AQHBoM9g:HYFOW57r5dt6Hqqmo5T+IWnLuCg

Score
7/10

Malware Config

Targets

    • Target

      a69ff0e6922d563a4e2aa9cea3a8a18c72b43338f4d2c6fd4d6d6f45e6c1f557

    • Size

      1.8MB

    • MD5

      2475d4fa80a7b6af042c79d1046016d2

    • SHA1

      22834caa9edf1fc3ea29c435efd772dc571a6ab4

    • SHA256

      a69ff0e6922d563a4e2aa9cea3a8a18c72b43338f4d2c6fd4d6d6f45e6c1f557

    • SHA512

      0b5a30de1edb91f4bffdf16973102f2fe560fcfdd57ffd77642eb6dee797d34d8a488491029792867426d3f24f280d60335752ab710675ea8a8ccded773fc5ac

    • SSDEEP

      49152:gpuG8T0+TL3Z0DmvyTm61lGdODmuGu4IDAAM:gpuGjaH6HGA/GxID7M

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

3
T1012

System Information Discovery

4
T1082

Peripheral Device Discovery

2
T1120

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks