Overview

overview

10

Static

static

12ed5ee7e0...e4.exe

windows7-x64

10

12ed5ee7e0...e4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    12ed5ee7e0b59e2e1cf8b756df164d5c596da4e7304629840ff147b4f5a99ae4

  • Size

    248KB

  • Sample

    221002-11386aebhq

  • MD5

    6545e131e34701cbdf844a6d2b23590d

  • SHA1

    6419c05bb93e0a96bb9f1266e7cfa74ee3d7242d

  • SHA256

    12ed5ee7e0b59e2e1cf8b756df164d5c596da4e7304629840ff147b4f5a99ae4

  • SHA512

    5743105b40738c013da4d10b64b108778b25d9b8373940a16b53437a24d0f14ff05328525568e1b979fdb40e797b1fc138e5d9311388f05426f8056de0358f16

  • SSDEEP

    3072:+R43SdJvRtFD1yPBYEmaHtGG2gqZ+/9A+JRjKY5Md41gfLX:Pqh1yPptGG2gqZ+FfKqDs

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      12ed5ee7e0b59e2e1cf8b756df164d5c596da4e7304629840ff147b4f5a99ae4

    • Size

      248KB

    • MD5

      6545e131e34701cbdf844a6d2b23590d

    • SHA1

      6419c05bb93e0a96bb9f1266e7cfa74ee3d7242d

    • SHA256

      12ed5ee7e0b59e2e1cf8b756df164d5c596da4e7304629840ff147b4f5a99ae4

    • SHA512

      5743105b40738c013da4d10b64b108778b25d9b8373940a16b53437a24d0f14ff05328525568e1b979fdb40e797b1fc138e5d9311388f05426f8056de0358f16

    • SSDEEP

      3072:+R43SdJvRtFD1yPBYEmaHtGG2gqZ+/9A+JRjKY5Md41gfLX:Pqh1yPptGG2gqZ+FfKqDs

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks