Overview

overview

7

Static

static

3

d52e76d6c0...12.exe

windows7-x64

7

d52e76d6c0...12.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d52e76d6c0432370cfc989a8f291959de725148dcc63e03c174768f138241912

  • Size

    12KB

  • Sample

    240604-d533mabg7v

  • MD5

    b8b66f027fe151bb2fafa2d1b5d35b28

  • SHA1

    9eaaafb01b66f61258fe60bd17014da6f68df2e9

  • SHA256

    d52e76d6c0432370cfc989a8f291959de725148dcc63e03c174768f138241912

  • SHA512

    f6698e5192add624018b2a842e5a90d5e15f92d8c2659963622a97d79227e9f048f46fe1d681b47018eba6ea10cd763dc3812d10a895a345cc4352766a5b111a

  • SSDEEP

    384:BL7li/2zMq2DcEQvdQcJKLTp/NK9xalW:hIMCQ9clW

Score
7/10

Malware Config

Targets

    • Target

      d52e76d6c0432370cfc989a8f291959de725148dcc63e03c174768f138241912

    • Size

      12KB

    • MD5

      b8b66f027fe151bb2fafa2d1b5d35b28

    • SHA1

      9eaaafb01b66f61258fe60bd17014da6f68df2e9

    • SHA256

      d52e76d6c0432370cfc989a8f291959de725148dcc63e03c174768f138241912

    • SHA512

      f6698e5192add624018b2a842e5a90d5e15f92d8c2659963622a97d79227e9f048f46fe1d681b47018eba6ea10cd763dc3812d10a895a345cc4352766a5b111a

    • SSDEEP

      384:BL7li/2zMq2DcEQvdQcJKLTp/NK9xalW:hIMCQ9clW

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks