Overview

overview

8

Static

static

3

698af3c26c...d1.exe

windows7-x64

1

698af3c26c...d1.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    698af3c26c7433818ed532e8d84b525f34c88b99f30ccb543e24102223e2ebd1.exe

  • Size

    1.0MB

  • Sample

    240821-b51amaxglr

  • MD5

    07ebe6bd39d47f8d9533d7910497510b

  • SHA1

    050bd05707529b4fb46608b276682d4be1fcfb88

  • SHA256

    698af3c26c7433818ed532e8d84b525f34c88b99f30ccb543e24102223e2ebd1

  • SHA512

    68fd8a9e4e25452142365f93657482839bef10dd6b88ea0f36ccc0f4dfbe79463aa13c84fcbc4148fa530c1a665e30f9a72acfbb0379368b5fc56da3473d044f

  • SSDEEP

    12288:otXlW6JhG2lO8FbG5byJR//uXShuqO3daKScHj/mTnGM:otE6JY2sYS5GJRuHkcHqTnGM

Score
8/10

Malware Config

Targets

    • Target

      698af3c26c7433818ed532e8d84b525f34c88b99f30ccb543e24102223e2ebd1.exe

    • Size

      1.0MB

    • MD5

      07ebe6bd39d47f8d9533d7910497510b

    • SHA1

      050bd05707529b4fb46608b276682d4be1fcfb88

    • SHA256

      698af3c26c7433818ed532e8d84b525f34c88b99f30ccb543e24102223e2ebd1

    • SHA512

      68fd8a9e4e25452142365f93657482839bef10dd6b88ea0f36ccc0f4dfbe79463aa13c84fcbc4148fa530c1a665e30f9a72acfbb0379368b5fc56da3473d044f

    • SSDEEP

      12288:otXlW6JhG2lO8FbG5byJR//uXShuqO3daKScHj/mTnGM:otE6JY2sYS5GJRuHkcHqTnGM

    Score
    8/10

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks