Overview

overview

7

Static

static

3

agent-0.9....64.exe

windows7-x64

7

agent-0.9....64.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    agent-0.9.0-windows-x64.exe

  • Size

    12.5MB

  • Sample

    240704-shmjpazhja

  • MD5

    981002dad15599cf88cecd9a5ed2feea

  • SHA1

    39f18e6fbb1330205847b350d730d399c4d5e361

  • SHA256

    b287700ad026bc68f694344c6d190a2225e09ed02440bb8ccba2428ea2ff772a

  • SHA512

    45d22c5733b8f1503e397c4ed39d6641b24c93b5b3f1b40fb67b148e0f0b98c09907d74485361dc47e8b1ff52813932ee317b4ac418162e700552b5fc84bfd7d

  • SSDEEP

    196608:tjOFTX/ClXeAXLHXfiExYdzE0yAISknzJB1:WX/k13okzJ

Score
7/10
persistence

Malware Config

Targets

    • Target

      agent-0.9.0-windows-x64.exe

    • Size

      12.5MB

    • MD5

      981002dad15599cf88cecd9a5ed2feea

    • SHA1

      39f18e6fbb1330205847b350d730d399c4d5e361

    • SHA256

      b287700ad026bc68f694344c6d190a2225e09ed02440bb8ccba2428ea2ff772a

    • SHA512

      45d22c5733b8f1503e397c4ed39d6641b24c93b5b3f1b40fb67b148e0f0b98c09907d74485361dc47e8b1ff52813932ee317b4ac418162e700552b5fc84bfd7d

    • SSDEEP

      196608:tjOFTX/ClXeAXLHXfiExYdzE0yAISknzJB1:WX/k13okzJ

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks