Overview

overview

10

Static

static

d37634afee...11.exe

windows7-x64

10

d37634afee...11.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d37634afee7d8385c74aa226e5ae0fb3e4d6d282b373bd9849751b2560e21b11

  • Size

    116KB

  • Sample

    221002-1j52esddbr

  • MD5

    4eb00b5760186e4f29be99c87e752879

  • SHA1

    bd574a98ac06cfe035a921945674c392f47faed1

  • SHA256

    d37634afee7d8385c74aa226e5ae0fb3e4d6d282b373bd9849751b2560e21b11

  • SHA512

    b6c15ee6b4109793c131edbaab5bfc5489889f5c2b69cba11ae405d699cf0e0ed7f82393d7c58b2552cbdc22fd64c167708906330965b7628f14e533666432e6

  • SSDEEP

    1536:KrxBL+Add8Kw6KBOcW4Z8HO1Zwt0f4HfDUEdMOPy9sbgNRwo7JaSi:gCAnfcr1ZoDUEdgwQU

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d37634afee7d8385c74aa226e5ae0fb3e4d6d282b373bd9849751b2560e21b11

    • Size

      116KB

    • MD5

      4eb00b5760186e4f29be99c87e752879

    • SHA1

      bd574a98ac06cfe035a921945674c392f47faed1

    • SHA256

      d37634afee7d8385c74aa226e5ae0fb3e4d6d282b373bd9849751b2560e21b11

    • SHA512

      b6c15ee6b4109793c131edbaab5bfc5489889f5c2b69cba11ae405d699cf0e0ed7f82393d7c58b2552cbdc22fd64c167708906330965b7628f14e533666432e6

    • SSDEEP

      1536:KrxBL+Add8Kw6KBOcW4Z8HO1Zwt0f4HfDUEdMOPy9sbgNRwo7JaSi:gCAnfcr1ZoDUEdgwQU

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks