Overview

overview

10

Static

static

8dac415efe...18.exe

windows7-x64

10

8dac415efe...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8dac415efe99ab09beca5ffae49cb8496a7d60488e2a5ab5cb952922fbdaf318

  • Size

    100KB

  • Sample

    220919-enj4vsfda3

  • MD5

    7768081f1ca8382d9e21cacf46b6ee2d

  • SHA1

    6ff2ece8fde50c78dc1a064d2aa6a12b6a815c32

  • SHA256

    8dac415efe99ab09beca5ffae49cb8496a7d60488e2a5ab5cb952922fbdaf318

  • SHA512

    b2e0d9617f3374c46a161e419864cc67ca3e08ee523eb250ef878748a06e5a63473debe25e41224f570647f3b445b84e260e47cccab347dfa1c7a7e3e04a7703

  • SSDEEP

    1536:EktGI82NTzwKVEMGAc4ohrPXo+73Rez8b0SysNIjP:pwKVzurPX7CsCP

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      8dac415efe99ab09beca5ffae49cb8496a7d60488e2a5ab5cb952922fbdaf318

    • Size

      100KB

    • MD5

      7768081f1ca8382d9e21cacf46b6ee2d

    • SHA1

      6ff2ece8fde50c78dc1a064d2aa6a12b6a815c32

    • SHA256

      8dac415efe99ab09beca5ffae49cb8496a7d60488e2a5ab5cb952922fbdaf318

    • SHA512

      b2e0d9617f3374c46a161e419864cc67ca3e08ee523eb250ef878748a06e5a63473debe25e41224f570647f3b445b84e260e47cccab347dfa1c7a7e3e04a7703

    • SSDEEP

      1536:EktGI82NTzwKVEMGAc4ohrPXo+73Rez8b0SysNIjP:pwKVzurPX7CsCP

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks