Overview

overview

7

Static

static

3

e7abf2293d...ab.exe

windows7-x64

7

e7abf2293d...ab.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e7abf2293d3f0b2d6b23bf7086cb2fabe93ea2ec748feaa3d73012d44eada8ab

  • Size

    12KB

  • Sample

    240605-fjd8gsff32

  • MD5

    84e2a24548d519d051a2e2fc84d8704f

  • SHA1

    bbe1fd77b226c94f2c54c1049896587d25e95714

  • SHA256

    e7abf2293d3f0b2d6b23bf7086cb2fabe93ea2ec748feaa3d73012d44eada8ab

  • SHA512

    0d17d7221257599d720f973f8c892fdd0c40cb7c6de033ffa7c99e48939dc38f8d6d12c9a36825de2dfb70eb6b72d096d2a971f5e829c551169e1b70a4cfd8d4

  • SSDEEP

    384:CL7li/2zWq2DcEQvdhcJKLTp/NK9xaPz:cWM/Q9cPz

Score
7/10

Malware Config

Targets

    • Target

      e7abf2293d3f0b2d6b23bf7086cb2fabe93ea2ec748feaa3d73012d44eada8ab

    • Size

      12KB

    • MD5

      84e2a24548d519d051a2e2fc84d8704f

    • SHA1

      bbe1fd77b226c94f2c54c1049896587d25e95714

    • SHA256

      e7abf2293d3f0b2d6b23bf7086cb2fabe93ea2ec748feaa3d73012d44eada8ab

    • SHA512

      0d17d7221257599d720f973f8c892fdd0c40cb7c6de033ffa7c99e48939dc38f8d6d12c9a36825de2dfb70eb6b72d096d2a971f5e829c551169e1b70a4cfd8d4

    • SSDEEP

      384:CL7li/2zWq2DcEQvdhcJKLTp/NK9xaPz:cWM/Q9cPz

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks