Overview

overview

7

Static

static

3

df78a114bf...43.exe

windows7-x64

7

df78a114bf...43.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43

  • Size

    4.9MB

  • Sample

    240909-rwwh3sshql

  • MD5

    f8c3d6326ce40fe135b55b18a762684a

  • SHA1

    5403fa880bbf7d89cb5b9f1461f7ae79b84dd1cf

  • SHA256

    df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43

  • SHA512

    c44016ba3503993be3facbf5d610405408b77b7b44d4a1bd5cde79d9fea3c45ae7b1abe1581f2e0a0bab7836317dfd8b180d8845881f4053b2f37e1f19d8dd8d

  • SSDEEP

    98304:XuWkRoYCr+MVwMm6lvlV5CQvUp3BviX5Nm7TFqmftYSo56Gg8WkDOWd1g+8oob:XUOVwMndrnEYXi7TFqmVYSLGHWhU1rob

Score
7/10
discovery

Malware Config

Targets

    • Target

      df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43

    • Size

      4.9MB

    • MD5

      f8c3d6326ce40fe135b55b18a762684a

    • SHA1

      5403fa880bbf7d89cb5b9f1461f7ae79b84dd1cf

    • SHA256

      df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43

    • SHA512

      c44016ba3503993be3facbf5d610405408b77b7b44d4a1bd5cde79d9fea3c45ae7b1abe1581f2e0a0bab7836317dfd8b180d8845881f4053b2f37e1f19d8dd8d

    • SSDEEP

      98304:XuWkRoYCr+MVwMm6lvlV5CQvUp3BviX5Nm7TFqmftYSo56Gg8WkDOWd1g+8oob:XUOVwMndrnEYXi7TFqmVYSLGHWhU1rob

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks