ebda9b30e03e53f6d48de09bd3550a697555eb0a8db63d97db16ffebaaa15d9e

General

Target
ebda9b30e03e53f6d48de09bd3550a697555eb0a8db63d97db16ffebaaa15d9e
Size 4.9MB
Sample260924-d5x7daycqa
SHA256 ebda9b30e03e53f6d48de09bd3550a697555eb0a8db63d97db16ffebaaa15d9e
MD5 6c03fdcbb59d298b6b045e5d643c0f0c
SHA1 5019252d4f93a8b06670efd57a65d370acca6908
SHA512 d648dd0832a8857a1e7bb5c09f18641bff598582e326ba88eba3a0a88a2213b56496a66dbe02c6fbd15e29d98e157170e80567261c7ce0d0e9695e408e44adf2
SSDEEP 98304:+4c8BZzDUmgTgcwef0sfR1cuYFAwn99yyJdUx2xxRvjZyzYNumAzxAwg9:+4c87DOTb0E1Jtwn99y+9xHVyg1Oel9
TLSH
T1AD363315C7896DE0CE1E028B22366FE15A3DCDD5C945A285AEDA21177B2402FB2FF35C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  WiseRegCleaner-Pro-v11.3.3.735-x64.exe
- Size 5.0MB
- SHA256 50902889a3bf17e8a23f7fcd7009fbf786b5c12ed8efd90e2e9c2e15ce8c96a9
- MD5 8d7186331f27c736161f83c82503a79f
- SHA1 467da6a6a8a2097116afd0659c5d5477677a94a6
- SHA512 98a09706263dd3abfca32f534665a8f9e720ed024b30539abbc65fc7d514ddfe677c8bd811408aac525de802a167999ffab7cc99ea667c939e1463eddfd90eb3
- SSDEEP 98304:CgwRaPuKZTzzUIGT2IYMviazRnuEY38gnHnCkldK1q5NNxn3UxAvgkP3LGhNkg:CgHWKFzcTDsSnPZgnHnCi75fJUKjPyMg
- TLSH
  T1FE3633117689EAF0DD19017625666FA12B3DDCE94F0486C3BED9360B3F34096F2BE249
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  去脚本之家看看.url
- Size 124B
- SHA256 c4965fa0cf71f391518797b3cc3b7ffef0ec991c5266f5f9cc90298a7da7e1da
- MD5 9d9c794d654383c012286b258556fe46
- SHA1 8266c2159f57859ff102df419a94157a2ccef61f
- SHA512 28b9a9519a0fb7e826adaf43e76dfd11df323f20ab3089ec53c6263a51c06635c9d0b0a325cb7d20f7db42734dc257666e77d63be620aca34cdb13b766da9bbe
- TLSH
  T126B012EC6A45C29BD372D80B71F0FD14A80F7DE088C2D5DC6680DD8A6C850C0D48AF66
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  服务器软件.url
- Size 112B
- SHA256 c85359e7af5e102716e42f659fd5c1931b553761898714ccbb261883a03f40e1
- MD5 db4aa2c6c4e0555b3968690756e24836
- SHA1 96933b815ecdcf2fd43bd2ef036260029a633801
- SHA512 6ca491f92f9990d706b75e7ff091f8c025de7d9dc438aa25cf6e8baa87e750f6f0490e9923d82aa00ac074b572468349ed52c2765ec1fd3183a9ea146a2ff5c3
- TLSH
  T133B012AC6D44C29ED152C80B70B0F844A80F7DE048C2D48CE590DD8A2C05080D487F56
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2

T1012

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6