Overview

overview

10

Static

static

10

00d68c00be...af.exe

windows7-x64

9

00d68c00be...af.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    00d68c00be975ed8b240541a7dcf269239738237d05d90408100abe2ea872baf.exe

  • Size

    4.0MB

  • Sample

    240525-bctx5sgh6y

  • MD5

    7547c03eb7ce4677e48ce4da638392db

  • SHA1

    84676e4b2726c9523d88c608432b81ee4ec99b98

  • SHA256

    00d68c00be975ed8b240541a7dcf269239738237d05d90408100abe2ea872baf

  • SHA512

    2de28fd8cb878ea355d806b8b49319a74b4ed2ef864cd0469fbd4fb6d09bbb45ecee5e8ffc93d6bc5f5fb5631b77707861b7a4efe86132f84529d7b754cc54e7

  • SSDEEP

    98304:0bv9S+XPFybnfWrHxgt3+7kfJc3pPT3K7DZW3KVnnGsx:gv9zFybn+rHxMMkfJH7dW0Gi

Score
10/10

Malware Config

Targets

    • Target

      00d68c00be975ed8b240541a7dcf269239738237d05d90408100abe2ea872baf.exe

    • Size

      4.0MB

    • MD5

      7547c03eb7ce4677e48ce4da638392db

    • SHA1

      84676e4b2726c9523d88c608432b81ee4ec99b98

    • SHA256

      00d68c00be975ed8b240541a7dcf269239738237d05d90408100abe2ea872baf

    • SHA512

      2de28fd8cb878ea355d806b8b49319a74b4ed2ef864cd0469fbd4fb6d09bbb45ecee5e8ffc93d6bc5f5fb5631b77707861b7a4efe86132f84529d7b754cc54e7

    • SSDEEP

      98304:0bv9S+XPFybnfWrHxgt3+7kfJc3pPT3K7DZW3KVnnGsx:gv9zFybn+rHxMMkfJH7dW0Gi

    Score
    9/10

    • Detects executables packed with unregistered version of .NET Reactor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks