Overview

overview

10

Static

static

8e71359412...54.exe

windows7-x64

10

8e71359412...54.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8e713594124c16dbdd1a0d6947b7ef397c37f340e643b19840f7036b26240354

  • Size

    336KB

  • Sample

    220919-a7j6rahch4

  • MD5

    d9f01a3b636cd7213daf5a32df83531d

  • SHA1

    0988d08bf5319975ef6c32a8c9e1910cd619e270

  • SHA256

    8e713594124c16dbdd1a0d6947b7ef397c37f340e643b19840f7036b26240354

  • SHA512

    c58bf89518a8b46cf61e1116c8c0013587b24e13cf8fa465f4587ebbd4d732f917e8f375b306112aab37b298849fff30a4fffca1b0b56922fa71939a42a2a924

  • SSDEEP

    6144:yANxh2WGk1Y3nmQcuyKQ5DzEJewavj9+zU5STd:/t2WGk1Y3nmQcjKAPEJZ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      8e713594124c16dbdd1a0d6947b7ef397c37f340e643b19840f7036b26240354

    • Size

      336KB

    • MD5

      d9f01a3b636cd7213daf5a32df83531d

    • SHA1

      0988d08bf5319975ef6c32a8c9e1910cd619e270

    • SHA256

      8e713594124c16dbdd1a0d6947b7ef397c37f340e643b19840f7036b26240354

    • SHA512

      c58bf89518a8b46cf61e1116c8c0013587b24e13cf8fa465f4587ebbd4d732f917e8f375b306112aab37b298849fff30a4fffca1b0b56922fa71939a42a2a924

    • SSDEEP

      6144:yANxh2WGk1Y3nmQcuyKQ5DzEJewavj9+zU5STd:/t2WGk1Y3nmQcjKAPEJZ

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks