Overview

overview

7

Static

static

3

3de504d3dd...ca.exe

windows7-x64

7

3de504d3dd...ca.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3de504d3dd9e6f5d64785525dd2dc5b222765fad1b79635e049af431a184e5ca

  • Size

    1.0MB

  • Sample

    240522-zlrq5sga6s

  • MD5

    303773d37e2eb56b9698d9088093c52e

  • SHA1

    a8d5071c34a1f9c4047d47f7301dc7069e2bc4fd

  • SHA256

    3de504d3dd9e6f5d64785525dd2dc5b222765fad1b79635e049af431a184e5ca

  • SHA512

    929f93996ef76647d2af90c6a5bd4a9c469c8211cd471d939203485ef4e4b11b3f87d11f53b4cbc17d744d6920e5d2f72549c8e02d72b0b52791306ee7f42a25

  • SSDEEP

    12288:Wh3ZukLF5fRY5a/6GX4D1DwhHd1zrwLof5e3glqu9s4uEpVTbKUMHyE2s0M:WhMkxlRSaiPDi3+kfxpOg/MHT2sl

Score
7/10
persistence

Malware Config

Targets

    • Target

      3de504d3dd9e6f5d64785525dd2dc5b222765fad1b79635e049af431a184e5ca

    • Size

      1.0MB

    • MD5

      303773d37e2eb56b9698d9088093c52e

    • SHA1

      a8d5071c34a1f9c4047d47f7301dc7069e2bc4fd

    • SHA256

      3de504d3dd9e6f5d64785525dd2dc5b222765fad1b79635e049af431a184e5ca

    • SHA512

      929f93996ef76647d2af90c6a5bd4a9c469c8211cd471d939203485ef4e4b11b3f87d11f53b4cbc17d744d6920e5d2f72549c8e02d72b0b52791306ee7f42a25

    • SSDEEP

      12288:Wh3ZukLF5fRY5a/6GX4D1DwhHd1zrwLof5e3glqu9s4uEpVTbKUMHyE2s0M:WhMkxlRSaiPDi3+kfxpOg/MHT2sl

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks