Overview

overview

7

Static

static

3

f1dskrb.exe

windows7-x64

7

f1dskrb.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f1dskrb.rar

  • Size

    1.3MB

  • Sample

    240619-y6x8zszeqh

  • MD5

    318d354cbeac262807e1593bb2fdc8d9

  • SHA1

    f31ce598370340326f3ec696b70b4d1b4aa655dc

  • SHA256

    fa3cd09143447476f859ef7fea9568df26631d7c6173648f45c4fb74af76dfdd

  • SHA512

    1add873126cc92fec7e88556b1cb039f17d73868e329ff1cde70c4fca18ca8f6050d7757961202dd634b38815a5a41354407e0c6fc28b3e4c1e59258ef2a393c

  • SSDEEP

    24576:/h/ZUh9fNWxuYlOWVcmic3CPco1jRSMlJSLnCff9FoVtXOjDXbFFgFK6oH6FqF:kvWxVlhyiCko1FlJOCAVtMXbFK5Js

Score
7/10
persistence

Malware Config

Targets

    • Target

      f1dskrb.exe

    • Size

      4.2MB

    • MD5

      121a45f56e41817a1e14d86cc473ffd8

    • SHA1

      e366edadba99369f66aaf15eae1d90908be6f7c6

    • SHA256

      84e882a29b73fd4a07d66a0ec72f588d3a04b81eee4fcb78adf276bd235db833

    • SHA512

      9da4d68eefd0ad9ffa0e5e56a921aa03f2177d5e9c736d94ce095a86c09c69cfb2457fcbc32ff398931a7402028f3779b10fae0dc3287a3c2bc6c67e3f0ddacf

    • SSDEEP

      49152:jnsHyjtk2MYC5GDunWlH3NtCg7zLY3UX38MXbvYBszN+33YemUS2:jnsmtk2aK9tCUJbv48e1mUS2

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks