Overview

overview

7

Static

static

3

f4a0a84191...86.exe

windows7-x64

7

f4a0a84191...86.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f4a0a84191816be014e697b62bb73b73f0029d4e9b8b0fdf1bc36b925cbe8686

  • Size

    548KB

  • Sample

    240524-r1ca1ahg37

  • MD5

    29974a1c26588cd2981034475d1ba6ca

  • SHA1

    aa5f9a6eed55cf813f485fcb846083ac3f512ce9

  • SHA256

    f4a0a84191816be014e697b62bb73b73f0029d4e9b8b0fdf1bc36b925cbe8686

  • SHA512

    2d406726f2b0a7fac8352e9d1405f7086bd312972ec9d492e43ed6ae051cdfa74a399fc086dfbeffdd2f675e0667d748085405fefed3635e65da1298a2794d6e

  • SSDEEP

    12288:fpUrMIztyCK5x8CBmn+RrNbEyWYa0Ie1vUx9VQ:fpGZyCA8CBmn+RrNj9ay5IQ

Score
7/10

Malware Config

Targets

    • Target

      f4a0a84191816be014e697b62bb73b73f0029d4e9b8b0fdf1bc36b925cbe8686

    • Size

      548KB

    • MD5

      29974a1c26588cd2981034475d1ba6ca

    • SHA1

      aa5f9a6eed55cf813f485fcb846083ac3f512ce9

    • SHA256

      f4a0a84191816be014e697b62bb73b73f0029d4e9b8b0fdf1bc36b925cbe8686

    • SHA512

      2d406726f2b0a7fac8352e9d1405f7086bd312972ec9d492e43ed6ae051cdfa74a399fc086dfbeffdd2f675e0667d748085405fefed3635e65da1298a2794d6e

    • SSDEEP

      12288:fpUrMIztyCK5x8CBmn+RrNbEyWYa0Ie1vUx9VQ:fpGZyCA8CBmn+RrNj9ay5IQ

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks