Overview

overview

10

Static

static

25befa6973...0e.exe

windows7-x64

10

25befa6973...0e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    25befa697341fcf40840868612fe2b3ddf1899ed70dc1e0e6d5396aee8770e0e

  • Size

    76KB

  • Sample

    221002-2e5ersddf6

  • MD5

    6ffa755d9e0f7db15bf24d44bd9f03a2

  • SHA1

    f7b30c2e303f50c0ee9e27c116f2a84aaafe6289

  • SHA256

    25befa697341fcf40840868612fe2b3ddf1899ed70dc1e0e6d5396aee8770e0e

  • SHA512

    a873fc08f48107c01dafbb33493d3fa12ff567c3b7c466fb96f00f696d04b9485bc34d6951051e18c146a3311e8cdea20bd745496ab67988369188f4b40b2f48

  • SSDEEP

    768:rF9XCP6N0pqkrsVEXiIOeBe/Y7bpVMMJuGWAlGn/NspdfSm6ZQFw6QOJ3UvIChgp:rF8troVAiIJqY7bAoSm6qd

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      25befa697341fcf40840868612fe2b3ddf1899ed70dc1e0e6d5396aee8770e0e

    • Size

      76KB

    • MD5

      6ffa755d9e0f7db15bf24d44bd9f03a2

    • SHA1

      f7b30c2e303f50c0ee9e27c116f2a84aaafe6289

    • SHA256

      25befa697341fcf40840868612fe2b3ddf1899ed70dc1e0e6d5396aee8770e0e

    • SHA512

      a873fc08f48107c01dafbb33493d3fa12ff567c3b7c466fb96f00f696d04b9485bc34d6951051e18c146a3311e8cdea20bd745496ab67988369188f4b40b2f48

    • SSDEEP

      768:rF9XCP6N0pqkrsVEXiIOeBe/Y7bpVMMJuGWAlGn/NspdfSm6ZQFw6QOJ3UvIChgp:rF8troVAiIJqY7bAoSm6qd

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

1
T1158

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Hidden Files and Directories

1
T1158

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks