Overview

overview

7

Static

static

3

spoofer.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    spoofer.exe

  • Size

    14.3MB

  • Sample

    240805-wr81tsxerc

  • MD5

    56e5756150c87d5a857102cedc54f174

  • SHA1

    dda8a95ca2d1da75dd690ba4db06960bbc70ede4

  • SHA256

    a9f60203842e0db343e0f98439feb3fb70e828bfe5d24d19e48c71b1bd244dc2

  • SHA512

    6aa0a99d45160a0a2936e294c366f218d801e2c30fba21f3c25ea527a4e5e385560bdaafa5b0811a2df0fa0495ee768e110ee068300560d171163120c9a78319

  • SSDEEP

    393216:4h8yVE15tKQ5HH8Akgu5+DQcwLEAeJFy5M/V9OsXv:e3EV/93kgu5PcwdeJ0Aqyv

Score
7/10
discovery

Malware Config

Targets

    • Target

      spoofer.exe

    • Size

      14.3MB

    • MD5

      56e5756150c87d5a857102cedc54f174

    • SHA1

      dda8a95ca2d1da75dd690ba4db06960bbc70ede4

    • SHA256

      a9f60203842e0db343e0f98439feb3fb70e828bfe5d24d19e48c71b1bd244dc2

    • SHA512

      6aa0a99d45160a0a2936e294c366f218d801e2c30fba21f3c25ea527a4e5e385560bdaafa5b0811a2df0fa0495ee768e110ee068300560d171163120c9a78319

    • SSDEEP

      393216:4h8yVE15tKQ5HH8Akgu5+DQcwLEAeJFy5M/V9OsXv:e3EV/93kgu5PcwdeJ0Aqyv

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks