Overview

overview

8

Static

static

1ee4dbdfad...65.exe

windows7-x64

8

1ee4dbdfad...65.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1ee4dbdfad2e44218f82f796fc51121e8df372bc7ac9017207aa065762ed6a65

  • Size

    2.4MB

  • Sample

    220930-xe81qsedc4

  • MD5

    5518a8ce491829d2a13fc9529bc37472

  • SHA1

    9e6d6157e6cb0608be8499ea2325a0f4b6414a90

  • SHA256

    1ee4dbdfad2e44218f82f796fc51121e8df372bc7ac9017207aa065762ed6a65

  • SHA512

    e870a5b74531c0b749a5641c29bbb587963cae93060deef83c0cb45d5f811fcc13abd178dd174eae2fb8df3bb30217e692377ad0e2e5dcb95445fce91d5fa50e

  • SSDEEP

    49152:K7lhiByVv53/WnZoq133HCDlDCalQU0tRoqv7zvoQz+HiE4ql0H:K7lhi8lAHHuVCmuvokv7z+HiXw8

Score
8/10
evasion

Malware Config

Targets

    • Target

      1ee4dbdfad2e44218f82f796fc51121e8df372bc7ac9017207aa065762ed6a65

    • Size

      2.4MB

    • MD5

      5518a8ce491829d2a13fc9529bc37472

    • SHA1

      9e6d6157e6cb0608be8499ea2325a0f4b6414a90

    • SHA256

      1ee4dbdfad2e44218f82f796fc51121e8df372bc7ac9017207aa065762ed6a65

    • SHA512

      e870a5b74531c0b749a5641c29bbb587963cae93060deef83c0cb45d5f811fcc13abd178dd174eae2fb8df3bb30217e692377ad0e2e5dcb95445fce91d5fa50e

    • SSDEEP

      49152:K7lhiByVv53/WnZoq133HCDlDCalQU0tRoqv7zvoQz+HiE4ql0H:K7lhi8lAHHuVCmuvokv7z+HiXw8

    Score
    8/10
    evasion

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks