Overview

overview

7

Static

static

3

3ff48f0105...0N.exe

windows7-x64

7

3ff48f0105...0N.exe

windows10-2004-x64

7

$PLUGINSDI...r5.exe

windows7-x64

3

$PLUGINSDI...r5.exe

windows10-2004-x64

6

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ff48f01052dacef92019b9b8d68c10006af354852083e72d38d17803a68df60N

  • Size

    269KB

  • Sample

    241006-e2977ssemq

  • MD5

    1071259f086612ad0c723ac87b1d9ee0

  • SHA1

    0073a2ae681c0771ec0d387caba40f0cc9d67cd4

  • SHA256

    3ff48f01052dacef92019b9b8d68c10006af354852083e72d38d17803a68df60

  • SHA512

    2575c79b225213a3b4f830b358bdb122bb8296499a4f1511975081d9e7cbb3f14aa742a61e55c7b991e6a762361e0dcbaa186a1776ddfa22dd1958f529dbd86a

  • SSDEEP

    3072:4X7DItrfaocyTgfsqQOlJXCWBk0+TRHUaBKJA8cUTfsFaA57dKMfNAtTyJmCex/e:4saocyLCyyJkKX0FJ7bVe54DKFLuBh

Score
7/10
discovery

Malware Config

Targets

    • Target

      3ff48f01052dacef92019b9b8d68c10006af354852083e72d38d17803a68df60N

    • Size

      269KB

    • MD5

      1071259f086612ad0c723ac87b1d9ee0

    • SHA1

      0073a2ae681c0771ec0d387caba40f0cc9d67cd4

    • SHA256

      3ff48f01052dacef92019b9b8d68c10006af354852083e72d38d17803a68df60

    • SHA512

      2575c79b225213a3b4f830b358bdb122bb8296499a4f1511975081d9e7cbb3f14aa742a61e55c7b991e6a762361e0dcbaa186a1776ddfa22dd1958f529dbd86a

    • SSDEEP

      3072:4X7DItrfaocyTgfsqQOlJXCWBk0+TRHUaBKJA8cUTfsFaA57dKMfNAtTyJmCex/e:4saocyLCyyJkKX0FJ7bVe54DKFLuBh

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/installer5.exe

    • Size

      215KB

    • MD5

      029162f299af12e48fc5ffde104766e2

    • SHA1

      467b9336af5aec76cbb548ece146cd2d7b4e1264

    • SHA256

      28e778a7e5f91d27cf37e7ed8624adb8e9f33d7d12d64ed6420b5345052591b0

    • SHA512

      fa522ef2364e5a31c119993d8057a3337bffdb7ce259b810efeb59e105885c8ca75086e1d568121600a919ad160e3be2667486ab56de7e7393df8d895293863c

    • SSDEEP

      6144:CDsvqBa8e7G39JPeepCbyGHyWqTW6h9EZLgee3Br:CDsvq8899zCEh9U4

    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      8KB

    • MD5

      249ae678f0dac4c625c6de6aca53823a

    • SHA1

      6ac2b9e90e8445fed4c45c5dbf2d0227cd3b5201

    • SHA256

      7298024a36310b7c4c112be87b61b62a0b1be493e2d5252a19e5e976daf674ce

    • SHA512

      66e4081a40f3191bf28b810cf8411cb3c8c3e3ec5943e18d6672414fb5e7b4364f862cba44c9115c599ac90890ef02a773e254e7c979e930946bc52b0693aad7

    • SSDEEP

      192:r/QeHNWSvUTfWdXw08LYKFaynLb3MRlbOVlR:7jBvwudT8LJxnnMRlyVlR

    Score
    3/10
    discovery
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks