Overview

overview

8

Static

static

3

7a593bed67...0N.exe

windows7-x64

8

7a593bed67...0N.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    7a593bed6758acd3ac424f63f2ef6f60N.exe

  • Size

    824KB

  • Sample

    240723-haffassfpr

  • MD5

    7a593bed6758acd3ac424f63f2ef6f60

  • SHA1

    90c0af4ec8a89f8e7097765f5c4083f771000a92

  • SHA256

    9f12a9ce12d4dbcb733fa3dca7742615386c6fe67dd0468f1f76bfba5a93098c

  • SHA512

    8b7f0ccf845848ec20ab57c4d2547d8c91150e89d598499059434e1182b3deb3aef9b18b10d97a4c5f1324bb47816a11ad9efbf5d673080d15bc54ede1dedfbb

  • SSDEEP

    6144:04sZBOZdjEYTPXMhaMP/kFTA7OAmBOZdjEYTPXMhaMP/a:0nANL8oq/kFTsOWNL8oq/a

Score
8/10
persistence

Malware Config

Targets

    • Target

      7a593bed6758acd3ac424f63f2ef6f60N.exe

    • Size

      824KB

    • MD5

      7a593bed6758acd3ac424f63f2ef6f60

    • SHA1

      90c0af4ec8a89f8e7097765f5c4083f771000a92

    • SHA256

      9f12a9ce12d4dbcb733fa3dca7742615386c6fe67dd0468f1f76bfba5a93098c

    • SHA512

      8b7f0ccf845848ec20ab57c4d2547d8c91150e89d598499059434e1182b3deb3aef9b18b10d97a4c5f1324bb47816a11ad9efbf5d673080d15bc54ede1dedfbb

    • SSDEEP

      6144:04sZBOZdjEYTPXMhaMP/kFTA7OAmBOZdjEYTPXMhaMP/a:0nANL8oq/kFTsOWNL8oq/a

    Score
    8/10
    persistence

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks