202c91b5a66baebaab306140bd356593e1d1c96c50feb6142c6529c0ed63c6e2 | Triage

Submit
Reports

Overview

overview

Static

static

202c91b5a6...e2.exe

windows7-x64

9

202c91b5a6...e2.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

Target

202c91b5a66baebaab306140bd356593e1d1c96c50feb6142c6529c0ed63c6e2
Size

62KB
Sample

240605-yhs95afg5s
MD5

59ca75a8723683e475f48b3e58300ddc
SHA1

c20a45b20898a9c464adef25f61be56770210d41
SHA256

202c91b5a66baebaab306140bd356593e1d1c96c50feb6142c6529c0ed63c6e2
SHA512

4724ec69ffdc4d37768897a503bf9ad451f2213f256c9895a832332573dddd6267202da3c6e5330866b56e630bb15f2c989a9eafbf744fc5726a0557864f1112
SSDEEP

768:MDcpEBMLfQcubV5wGE96YyXDTLddMMMMauuuuRwTTTT8kkke:MDcfLfIbtEbyXfZYuuuuuTTTTm

Score

10^/10

evasion

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

202c91b5a66baebaab306140bd356593e1d1c96c50feb6142c6529c0ed63c6e2.exe

Resource

win7-20240508-en

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

202c91b5a66baebaab306140bd356593e1d1c96c50feb6142c6529c0ed63c6e2.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  202c91b5a66baebaab306140bd356593e1d1c96c50feb6142c6529c0ed63c6e2
- Size
  
  62KB
- MD5
  
  59ca75a8723683e475f48b3e58300ddc
- SHA1
  
  c20a45b20898a9c464adef25f61be56770210d41
- SHA256
  
  202c91b5a66baebaab306140bd356593e1d1c96c50feb6142c6529c0ed63c6e2
- SHA512
  
  4724ec69ffdc4d37768897a503bf9ad451f2213f256c9895a832332573dddd6267202da3c6e5330866b56e630bb15f2c989a9eafbf744fc5726a0557864f1112
- SSDEEP
  
  768:MDcpEBMLfQcubV5wGE96YyXDTLddMMMMauuuuRwTTTT8kkke:MDcfLfIbtEbyXfZYuuuuuTTTTm
Score

9^/10

evasion
- Detects Windows executables referencing non-Windows User-Agents
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy