Overview

overview

7

Static

static

3

8f6ae16d2e...af.exe

windows7-x64

7

8f6ae16d2e...af.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8f6ae16d2e4a33327d98b496509dd3cc5344e01a8c849425a6584eef8e33e0af

  • Size

    12KB

  • Sample

    240522-djn2ksab98

  • MD5

    c517370ce66c2d93a01f0d2a72fabdda

  • SHA1

    02f8c4bd2e0864c9b109eff569fe31fd313f27db

  • SHA256

    8f6ae16d2e4a33327d98b496509dd3cc5344e01a8c849425a6584eef8e33e0af

  • SHA512

    1ff4dfea15080f9843a8f35b51ff6a40f23f1802569e982f3d15f71d13cf74685a7ba7fd3e6101657582ed07a607a833e100f7df584279b6250308e011f7eb00

  • SSDEEP

    384:BL7li/2z5q2DcEQvdhcJKLTp/NK9xaxm:hJM/Q9cxm

Score
7/10

Malware Config

Targets

    • Target

      8f6ae16d2e4a33327d98b496509dd3cc5344e01a8c849425a6584eef8e33e0af

    • Size

      12KB

    • MD5

      c517370ce66c2d93a01f0d2a72fabdda

    • SHA1

      02f8c4bd2e0864c9b109eff569fe31fd313f27db

    • SHA256

      8f6ae16d2e4a33327d98b496509dd3cc5344e01a8c849425a6584eef8e33e0af

    • SHA512

      1ff4dfea15080f9843a8f35b51ff6a40f23f1802569e982f3d15f71d13cf74685a7ba7fd3e6101657582ed07a607a833e100f7df584279b6250308e011f7eb00

    • SSDEEP

      384:BL7li/2z5q2DcEQvdhcJKLTp/NK9xaxm:hJM/Q9cxm

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks