Overview

overview

7

Static

static

3

f804399a79...01.exe

windows7-x64

7

f804399a79...01.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    f804399a79f59008b861e204dec4babc53c556f565af794dc6f3204154938401

  • Size

    12KB

  • Sample

    240528-qnc64afa9y

  • MD5

    b4ca9e7dab55f4650035a2d02b33fc50

  • SHA1

    a240e5642f1eb1489b48acb987dc864dd617658e

  • SHA256

    f804399a79f59008b861e204dec4babc53c556f565af794dc6f3204154938401

  • SHA512

    d57d476a6dfb464b757c5a1a915dd7a34bbc631b68aa20cbf4fa195fec04be3f95ca09b9edcad12e8853b891da286ce91c5e53567f2d26d170ac807674a447c6

  • SSDEEP

    384:8L7li/2zuq2DcEQvdhcJKLTp/NK9xax3:aGM/Q9cx3

Score
7/10

Malware Config

Targets

    • Target

      f804399a79f59008b861e204dec4babc53c556f565af794dc6f3204154938401

    • Size

      12KB

    • MD5

      b4ca9e7dab55f4650035a2d02b33fc50

    • SHA1

      a240e5642f1eb1489b48acb987dc864dd617658e

    • SHA256

      f804399a79f59008b861e204dec4babc53c556f565af794dc6f3204154938401

    • SHA512

      d57d476a6dfb464b757c5a1a915dd7a34bbc631b68aa20cbf4fa195fec04be3f95ca09b9edcad12e8853b891da286ce91c5e53567f2d26d170ac807674a447c6

    • SSDEEP

      384:8L7li/2zuq2DcEQvdhcJKLTp/NK9xax3:aGM/Q9cx3

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks