Overview

overview

8

Static

static

3

天刑版本.exe

windows10-2004-x64

8

天刑版本.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    jaffacakes118_Backdoor.Win32.Zegost.mtcvf.03a8f09f510b7c626b2b7347a2275c9c
  • Size 3.5MB
  • Sample261015-payefacv71
  • SHA256 0ce83532b57ba9bb114fdb74b5a90860b6b22859508f7b3e7ad6bf5ea4eddf65
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoveryexecution

Malware Config

Targets

    • Target
      天刑版本.exe
    • Size 4.0MB
    • SHA256 df28984cb3b7666d2116f9a7ac3871e30b13a60bdf4efb2475824bd70fb6102f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    discoveryexecution

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks