Overview

overview

8

Static

static

3

6c2f6c742c...00.exe

windows7-x64

8

6c2f6c742c...00.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    6c2f6c742c62053e422d4302d447142df4de84f466c538a0e1443ed490c05100

  • Size

    1.0MB

  • Sample

    240921-1fk7vavfkg

  • MD5

    05e95e156b82dbd63da9a443ec6fe439

  • SHA1

    c43ce228de259b9313e7ec21f6d8d6b14945f5ac

  • SHA256

    6c2f6c742c62053e422d4302d447142df4de84f466c538a0e1443ed490c05100

  • SHA512

    54095ca591b7af910d5b1c0f685e0ae03861c54cd55f72cf180253d9e22ddabc12a02379641e2d19cc13de51af50b8f65491cf1528c6092179297e92d98a1e04

  • SSDEEP

    24576:MwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwW:Mwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwo

Score
8/10
discovery

Malware Config

Targets

    • Target

      6c2f6c742c62053e422d4302d447142df4de84f466c538a0e1443ed490c05100

    • Size

      1.0MB

    • MD5

      05e95e156b82dbd63da9a443ec6fe439

    • SHA1

      c43ce228de259b9313e7ec21f6d8d6b14945f5ac

    • SHA256

      6c2f6c742c62053e422d4302d447142df4de84f466c538a0e1443ed490c05100

    • SHA512

      54095ca591b7af910d5b1c0f685e0ae03861c54cd55f72cf180253d9e22ddabc12a02379641e2d19cc13de51af50b8f65491cf1528c6092179297e92d98a1e04

    • SSDEEP

      24576:MwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwW:Mwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwo

    Score
    8/10
    discovery

    • Drops file in Drivers directory

    • Manipulates Digital Signatures

      Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks