Overview

overview

8

Static

static

1

bean_dc_pf.jpg

windows7-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bean_dc_pf.jpg

  • Size

    4KB

  • Sample

    250327-sf5bqatwcv

  • MD5

    7c0cff84cc489fccfa0a9183557c4444

  • SHA1

    8f97b3f8cb9a394a5282a43aea8d2849eefddf95

  • SHA256

    8c6f28e121dd2b286a25ce368515b5d652f94b2dcba40f6b55c7d858c4850134

  • SHA512

    8868c676d7227e797d402b8911d4ba984d4b9008eb9f0963059633c429b6b4eb5cdd6c5e475819537df886bcc8858c003f43b1874007536a4be318a8b20ad822

  • SSDEEP

    96:C0/EANA44OsXsvxuUUXzhA7rJnUvL4eNwrj9gKZUvUKFFyf6Shbbbbbbbbbbbbbt:C0MAkJs5urNyrCvL/wjyVUKM6Shbbbbh

Score
8/10
discoverylinkpdf

Malware Config

Targets

    • Target

      bean_dc_pf.jpg

    • Size

      4KB

    • MD5

      7c0cff84cc489fccfa0a9183557c4444

    • SHA1

      8f97b3f8cb9a394a5282a43aea8d2849eefddf95

    • SHA256

      8c6f28e121dd2b286a25ce368515b5d652f94b2dcba40f6b55c7d858c4850134

    • SHA512

      8868c676d7227e797d402b8911d4ba984d4b9008eb9f0963059633c429b6b4eb5cdd6c5e475819537df886bcc8858c003f43b1874007536a4be318a8b20ad822

    • SSDEEP

      96:C0/EANA44OsXsvxuUUXzhA7rJnUvL4eNwrj9gKZUvUKFFyf6Shbbbbbbbbbbbbbt:C0MAkJs5urNyrCvL/wjyVUKM6Shbbbbh

    Score
    8/10
    discoverylinkpdf

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks