Overview

overview

10

Static

static

10

4489807521...57.exe

windows7-x64

9

4489807521...57.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4489807521e3507dc2955009ecfd2ec9e2545ad0d4958cd85c52442a450e6e57

  • Size

    179KB

  • Sample

    240522-zw3w6agg24

  • MD5

    98a799292c19a8c66ca9644e10f7446a

  • SHA1

    29387fc643e7e01fa1a5cec718b1e784d8248825

  • SHA256

    4489807521e3507dc2955009ecfd2ec9e2545ad0d4958cd85c52442a450e6e57

  • SHA512

    73ad05fb47220219dbbf200704015c5d309ead4df5474dab839bc1f7968302c7757553f2cf22b4637ce2e0d2d6ec8995a370530aed79e216d5b79f00ca26891a

  • SSDEEP

    3072:XXTTASJKf2n5AxE2NpxOa2XdU2QF4s5XgIDFyHb8kHofL/09rGB:XvASJKenie2xT2NU2OTFQb8Fb0IB

Score
10/10
persistence

Malware Config

Targets

    • Target

      4489807521e3507dc2955009ecfd2ec9e2545ad0d4958cd85c52442a450e6e57

    • Size

      179KB

    • MD5

      98a799292c19a8c66ca9644e10f7446a

    • SHA1

      29387fc643e7e01fa1a5cec718b1e784d8248825

    • SHA256

      4489807521e3507dc2955009ecfd2ec9e2545ad0d4958cd85c52442a450e6e57

    • SHA512

      73ad05fb47220219dbbf200704015c5d309ead4df5474dab839bc1f7968302c7757553f2cf22b4637ce2e0d2d6ec8995a370530aed79e216d5b79f00ca26891a

    • SSDEEP

      3072:XXTTASJKf2n5AxE2NpxOa2XdU2QF4s5XgIDFyHb8kHofL/09rGB:XvASJKenie2xT2NU2OTFQb8Fb0IB

    Score
    9/10
    persistence

    • Detects executables packed with aPLib.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Checks for any installed AV software in registry

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks