Overview

overview

7

Static

static

3

data.exe

windows10-2004-x64

7

Resubmissions

20-12-2024 17:19

241220-vvwdgazpdv 10

20-12-2024 17:17

241220-vtsk7azpb1 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    data.dat

  • Size

    5.6MB

  • Sample

    241220-vtsk7azpb1

  • MD5

    d650ccbec4cef66b790c0adbd0c690ed

  • SHA1

    7c5323641a28170edb3121d9ad15d7bf643d801d

  • SHA256

    b8735a6c2caa10ed5e886a60be7f2a1edb55e5d26d60b24d24af5613a8a0e474

  • SHA512

    332dc8e1b3952ac3b3fbcfdf1634eaf9720d6bd85e6a1f0baef0f095c97a98d288f301b774c4d041c45ea8ea5ed8e52e8d786a874b8d0ce41dd5dd25a961b535

  • SSDEEP

    98304:6W1l27OuKr+gvhf2U9Nzm31PMoslkqXf0FvUcwti78OqJ7TPBvc8X6Uc:6jOuK6mn9NzgMoYkSIvUcwti7TQlvciE

Score
7/10
discovery

Malware Config

Targets

    • Target

      data.dat

    • Size

      5.6MB

    • MD5

      d650ccbec4cef66b790c0adbd0c690ed

    • SHA1

      7c5323641a28170edb3121d9ad15d7bf643d801d

    • SHA256

      b8735a6c2caa10ed5e886a60be7f2a1edb55e5d26d60b24d24af5613a8a0e474

    • SHA512

      332dc8e1b3952ac3b3fbcfdf1634eaf9720d6bd85e6a1f0baef0f095c97a98d288f301b774c4d041c45ea8ea5ed8e52e8d786a874b8d0ce41dd5dd25a961b535

    • SSDEEP

      98304:6W1l27OuKr+gvhf2U9Nzm31PMoslkqXf0FvUcwti78OqJ7TPBvc8X6Uc:6jOuK6mn9NzgMoYkSIvUcwti7TQlvciE

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Enumerates processes with tasklist

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks