Overview

overview

10

Static

static

9578ce532a...1e.exe

windows7-x64

10

9578ce532a...1e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9578ce532a8823901ad06bd1fc4ae9973052c74b901e2f85e136330e6251671e

  • Size

    128KB

  • Sample

    220919-plk89agfb4

  • MD5

    996dde87021e5987b024277aafbf19bf

  • SHA1

    a76be5b73ae1231f7bd00ae519fd779ca64b9067

  • SHA256

    9578ce532a8823901ad06bd1fc4ae9973052c74b901e2f85e136330e6251671e

  • SHA512

    70b9e76aca3bca33973004cc0a09b8613cc108d99858e2067bcb9a51427c9b67b9c110a09da65e5bf7b8097ea5784625dd12a0b3807ab1c04e7397d5bed1afce

  • SSDEEP

    3072:+7CbZSukOY8hrJFVNM/N/5sfqDfwqpHa:0ork6hrJ3NON/5sG9

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      9578ce532a8823901ad06bd1fc4ae9973052c74b901e2f85e136330e6251671e

    • Size

      128KB

    • MD5

      996dde87021e5987b024277aafbf19bf

    • SHA1

      a76be5b73ae1231f7bd00ae519fd779ca64b9067

    • SHA256

      9578ce532a8823901ad06bd1fc4ae9973052c74b901e2f85e136330e6251671e

    • SHA512

      70b9e76aca3bca33973004cc0a09b8613cc108d99858e2067bcb9a51427c9b67b9c110a09da65e5bf7b8097ea5784625dd12a0b3807ab1c04e7397d5bed1afce

    • SSDEEP

      3072:+7CbZSukOY8hrJFVNM/N/5sfqDfwqpHa:0ork6hrJ3NON/5sG9

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks