Overview

overview

7

Static

static

3

63202be28d...44.exe

windows7-x64

7

63202be28d...44.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    63202be28ddcb32b3d5d809445eb0686054fe7744c6b725e31c2c8e22be18844

  • Size

    12KB

  • Sample

    240603-19nvtsbb3s

  • MD5

    2ef567d192c69c37dafe905cf10e1357

  • SHA1

    c16b170c3c2fda87ffde1f810f368f06d531240b

  • SHA256

    63202be28ddcb32b3d5d809445eb0686054fe7744c6b725e31c2c8e22be18844

  • SHA512

    3859862d466716a4e43a498e9f92075b1447a5accec52707202a1a3e3839fdcfa211ec96617356eb4936e83931d4f38a70edf90e30f471b44aae9fa95cf75da1

  • SSDEEP

    384:wL7li/2zWq2DcEQvdhcJKLTp/NK9xauc:ueM/Q9cuc

Score
7/10

Malware Config

Targets

    • Target

      63202be28ddcb32b3d5d809445eb0686054fe7744c6b725e31c2c8e22be18844

    • Size

      12KB

    • MD5

      2ef567d192c69c37dafe905cf10e1357

    • SHA1

      c16b170c3c2fda87ffde1f810f368f06d531240b

    • SHA256

      63202be28ddcb32b3d5d809445eb0686054fe7744c6b725e31c2c8e22be18844

    • SHA512

      3859862d466716a4e43a498e9f92075b1447a5accec52707202a1a3e3839fdcfa211ec96617356eb4936e83931d4f38a70edf90e30f471b44aae9fa95cf75da1

    • SSDEEP

      384:wL7li/2zWq2DcEQvdhcJKLTp/NK9xauc:ueM/Q9cuc

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks