Overview

overview

8

Static

static

3

ddc711cb1d...0N.exe

windows7-x64

8

ddc711cb1d...0N.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    ddc711cb1d200737d3a4625667711100N

  • Size

    9.1MB

  • Sample

    240908-ywa1pswaqf

  • MD5

    ddc711cb1d200737d3a4625667711100

  • SHA1

    3002e1741986f023a4b4a3f132f48346901412c9

  • SHA256

    06f921641439e36a77f91e7153d550ac979c344b16ac2a9e5146fda76806ab3e

  • SHA512

    5172894303c4116043d4a660069fbe774752fa9e3e20cbdcef52adea61528a8c91c178c84a70cd1f548409988b9628fda91ff103d570549bc3fb2b8912bd6fcd

  • SSDEEP

    196608:lobzF3WpAmRh9E3p7sLHNxE5kzKH7z1Djok+oUpUWiHoZyEAZ+FcAjoSZl:lobR3WpX/9E3JsLHNNKHntj7+oUpUWiu

Score
8/10
defense_evasiondiscoveryexecution

Malware Config

Targets

    • Target

      ddc711cb1d200737d3a4625667711100N

    • Size

      9.1MB

    • MD5

      ddc711cb1d200737d3a4625667711100

    • SHA1

      3002e1741986f023a4b4a3f132f48346901412c9

    • SHA256

      06f921641439e36a77f91e7153d550ac979c344b16ac2a9e5146fda76806ab3e

    • SHA512

      5172894303c4116043d4a660069fbe774752fa9e3e20cbdcef52adea61528a8c91c178c84a70cd1f548409988b9628fda91ff103d570549bc3fb2b8912bd6fcd

    • SSDEEP

      196608:lobzF3WpAmRh9E3p7sLHNxE5kzKH7z1Djok+oUpUWiHoZyEAZ+FcAjoSZl:lobR3WpX/9E3JsLHNNKHntj7+oUpUWiu

    Score
    8/10
    defense_evasiondiscoveryexecution

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks