Overview

overview

7

Static

static

3

328bd3db84...d5.exe

windows7-x64

7

328bd3db84...d5.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    328bd3db843fbb6b8edf018c4a7c07fc272d87b81059be53071996b0c53d04d5

  • Size

    12KB

  • Sample

    240601-ysymlaec62

  • MD5

    01b71b2c5db5a42ae9ec53f48b43a808

  • SHA1

    3b1c203448b8b53e668d5de21d9fe7ada2a8ae3c

  • SHA256

    328bd3db843fbb6b8edf018c4a7c07fc272d87b81059be53071996b0c53d04d5

  • SHA512

    ad9cc4755d3e9897f9c6a4fc2a1b9cd5cdb4ac5ff8380a9bdef17a5bd6c6e86f8267ff2095bc0813c5eecf5a6a98e4cdb0e0132a9a739db807f46a0d507e7649

  • SSDEEP

    384:9L7li/2ziq2DcEQvdQcJKLTp/NK9xaqR:tyMCQ9cqR

Score
7/10

Malware Config

Targets

    • Target

      328bd3db843fbb6b8edf018c4a7c07fc272d87b81059be53071996b0c53d04d5

    • Size

      12KB

    • MD5

      01b71b2c5db5a42ae9ec53f48b43a808

    • SHA1

      3b1c203448b8b53e668d5de21d9fe7ada2a8ae3c

    • SHA256

      328bd3db843fbb6b8edf018c4a7c07fc272d87b81059be53071996b0c53d04d5

    • SHA512

      ad9cc4755d3e9897f9c6a4fc2a1b9cd5cdb4ac5ff8380a9bdef17a5bd6c6e86f8267ff2095bc0813c5eecf5a6a98e4cdb0e0132a9a739db807f46a0d507e7649

    • SSDEEP

      384:9L7li/2ziq2DcEQvdQcJKLTp/NK9xaqR:tyMCQ9cqR

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks