Overview

overview

7

Static

static

3

3b04d5e54a...72.exe

windows7-x64

7

3b04d5e54a...72.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3b04d5e54a321fd57f60298e9b14dca4667599cafb5f904d8a896df6a04e3f72

  • Size

    12KB

  • Sample

    240604-zdtkrsaf4w

  • MD5

    2ed54640d60bcb4dc15a8115c78a4822

  • SHA1

    d6ce49fed5a3be935887dc8744bd6168369fade5

  • SHA256

    3b04d5e54a321fd57f60298e9b14dca4667599cafb5f904d8a896df6a04e3f72

  • SHA512

    968614bfcebf6cb5b3df4b26c4d0361f2d5cef0b173c77da3c174c250f6ef8ac42de12b8ccc990eadb83225724e91298c994bb02761c21bbd7dca6c19ae87fb3

  • SSDEEP

    384:qL7li/2ziq2DcEQvdhcJKLTp/NK9xa84:0SM/Q9c84

Score
7/10

Malware Config

Targets

    • Target

      3b04d5e54a321fd57f60298e9b14dca4667599cafb5f904d8a896df6a04e3f72

    • Size

      12KB

    • MD5

      2ed54640d60bcb4dc15a8115c78a4822

    • SHA1

      d6ce49fed5a3be935887dc8744bd6168369fade5

    • SHA256

      3b04d5e54a321fd57f60298e9b14dca4667599cafb5f904d8a896df6a04e3f72

    • SHA512

      968614bfcebf6cb5b3df4b26c4d0361f2d5cef0b173c77da3c174c250f6ef8ac42de12b8ccc990eadb83225724e91298c994bb02761c21bbd7dca6c19ae87fb3

    • SSDEEP

      384:qL7li/2ziq2DcEQvdhcJKLTp/NK9xa84:0SM/Q9c84

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks