Overview

overview

7

Static

static

3

wininit.exe

windows7-x64

7

wininit.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    wininit.exe

  • Size

    53KB

  • Sample

    240607-zz9h4sch71

  • MD5

    1afa5d79303cd6a555bc8104dc2b8f8a

  • SHA1

    9219b262abbd01ff144badd7b7e403a48d4e3763

  • SHA256

    eda92439a40101e33a542ac1545c722ba43f77407bf117181c7f207fd9ec55bf

  • SHA512

    5c8fbe2b5dd7b00d9570bead3dfe90e7b257562b2173fac7065d5a6168d55c4dd947c083a89d8ad0dc7d1373292499ef12fc88d0060c5db3e392aec8a50b5531

  • SSDEEP

    1536:Lbne4IqDlL4VnnauImeVsrhQQJ3oMPDS3b19Q:L64IQlL4VxRhdJVrS3b4

Score
7/10

Malware Config

Targets

    • Target

      wininit.exe

    • Size

      53KB

    • MD5

      1afa5d79303cd6a555bc8104dc2b8f8a

    • SHA1

      9219b262abbd01ff144badd7b7e403a48d4e3763

    • SHA256

      eda92439a40101e33a542ac1545c722ba43f77407bf117181c7f207fd9ec55bf

    • SHA512

      5c8fbe2b5dd7b00d9570bead3dfe90e7b257562b2173fac7065d5a6168d55c4dd947c083a89d8ad0dc7d1373292499ef12fc88d0060c5db3e392aec8a50b5531

    • SSDEEP

      1536:Lbne4IqDlL4VnnauImeVsrhQQJ3oMPDS3b19Q:L64IQlL4VxRhdJVrS3b4

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks