Overview

overview

7

Static

static

3

44f30c7da7...2N.exe

windows7-x64

7

44f30c7da7...2N.exe

windows10-2004-x64

7

$PLUGINSDIR/ins5.exe

windows7-x64

3

$PLUGINSDIR/ins5.exe

windows10-2004-x64

6

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    44f30c7da7cf8d33505e322a62ef5669e615e57fd27386a484f2fb5d06c05d12N

  • Size

    270KB

  • Sample

    241006-hjwhwayfqa

  • MD5

    023d1286ef62f5d2ea301044b99e5fa0

  • SHA1

    eaf9750ba9a1e6dbde96e205405b42fb4b3502fd

  • SHA256

    44f30c7da7cf8d33505e322a62ef5669e615e57fd27386a484f2fb5d06c05d12

  • SHA512

    b6d6d9048c0efb4f6c854997c99e1cfff3c6c155029cb7652e843168ae6df5f522baed9751aa15c7c8ed0cc4ec90d4bbb624c40ecdcb6e955d14ef781255c140

  • SSDEEP

    6144:gsaocyLCMj4PTLeKi7aJgXnotGxwFf2+FbI8qNfRFX7QBlvzd/ZD:gtobL+2Kkokotdu+RE5xk7vz7

Score
7/10
discovery

Malware Config

Targets

    • Target

      44f30c7da7cf8d33505e322a62ef5669e615e57fd27386a484f2fb5d06c05d12N

    • Size

      270KB

    • MD5

      023d1286ef62f5d2ea301044b99e5fa0

    • SHA1

      eaf9750ba9a1e6dbde96e205405b42fb4b3502fd

    • SHA256

      44f30c7da7cf8d33505e322a62ef5669e615e57fd27386a484f2fb5d06c05d12

    • SHA512

      b6d6d9048c0efb4f6c854997c99e1cfff3c6c155029cb7652e843168ae6df5f522baed9751aa15c7c8ed0cc4ec90d4bbb624c40ecdcb6e955d14ef781255c140

    • SSDEEP

      6144:gsaocyLCMj4PTLeKi7aJgXnotGxwFf2+FbI8qNfRFX7QBlvzd/ZD:gtobL+2Kkokotdu+RE5xk7vz7

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/ins5.exe

    • Size

      214KB

    • MD5

      081f1ef743489a25c99fdd25f6d4f70d

    • SHA1

      dfdbd1caf714644f6c1b1b383f717028c39a2db0

    • SHA256

      ed6b25ef9345aa31303cdc1cad322b1607eda3bf7bfefe7445105baddd59c635

    • SHA512

      bf2962affa9ffb92cbaa17389a71b6ecf548cf6629237444a4b078bdcbd29cdd825055e2fe49530053c864bb1ad42726c083bb7db6d20b0afc939363365ec4ca

    • SSDEEP

      3072:qpFqhbMvJOdrwfJ2aQTOhPCGketb/rFwhAsg/J/uz9VK94faaDjqo2YP9afwtfej:qGU0wJWTODk8bZw+/VOK9OqoDP9afx

    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      8KB

    • MD5

      249ae678f0dac4c625c6de6aca53823a

    • SHA1

      6ac2b9e90e8445fed4c45c5dbf2d0227cd3b5201

    • SHA256

      7298024a36310b7c4c112be87b61b62a0b1be493e2d5252a19e5e976daf674ce

    • SHA512

      66e4081a40f3191bf28b810cf8411cb3c8c3e3ec5943e18d6672414fb5e7b4364f862cba44c9115c599ac90890ef02a773e254e7c979e930946bc52b0693aad7

    • SSDEEP

      192:r/QeHNWSvUTfWdXw08LYKFaynLb3MRlbOVlR:7jBvwudT8LJxnnMRlyVlR

    Score
    3/10
    discovery
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks