Overview

overview

10

Static

static

1

14a6cd64a4...92.exe

windows7-x64

10

14a6cd64a4...92.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    14a6cd64a40a3a877d30c30ecd353e2690e023e523531a2984afa5c4ba45e692

  • Size

    64KB

  • Sample

    220919-bcdwxsdffk

  • MD5

    b02dc31bbc2e60de0a86a86eff0ff446

  • SHA1

    be2ac8bd8bccc8070c428d3c1513900dfcf99921

  • SHA256

    14a6cd64a40a3a877d30c30ecd353e2690e023e523531a2984afa5c4ba45e692

  • SHA512

    e0b156a37014166d4fc41c8f46fdc936b7c3a4be967da7ee4814311196a14ee3b3949f2d5395e09b024e5e5419cb4962c7472fbe8be79639ffe2171cfbcfe9e8

  • SSDEEP

    1536:V3cpyORJLuB4P4AJJv4Romu/J/xKzi+5uhOIvd:V3c1fP4AJJv45mKO+Upvd

Score
10/10
evasion

Malware Config

Targets

    • Target

      14a6cd64a40a3a877d30c30ecd353e2690e023e523531a2984afa5c4ba45e692

    • Size

      64KB

    • MD5

      b02dc31bbc2e60de0a86a86eff0ff446

    • SHA1

      be2ac8bd8bccc8070c428d3c1513900dfcf99921

    • SHA256

      14a6cd64a40a3a877d30c30ecd353e2690e023e523531a2984afa5c4ba45e692

    • SHA512

      e0b156a37014166d4fc41c8f46fdc936b7c3a4be967da7ee4814311196a14ee3b3949f2d5395e09b024e5e5419cb4962c7472fbe8be79639ffe2171cfbcfe9e8

    • SSDEEP

      1536:V3cpyORJLuB4P4AJJv4Romu/J/xKzi+5uhOIvd:V3c1fP4AJJv45mKO+Upvd

    Score
    10/10
    evasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks