Overview

overview

8

Static

static

e247dc96ef...9f.exe

windows7-x64

8

e247dc96ef...9f.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e247dc96ef358a7a8b91d7224d8c9af845acf1410e694cefdd4f977a0845cc9f

  • Size

    595KB

  • Sample

    221002-2pa9nsdhd5

  • MD5

    6ba89295d9ec47899d50ef552b4b8353

  • SHA1

    6df0ab0529c83b6fd8ccb4eb4b43c8105b1c788a

  • SHA256

    e247dc96ef358a7a8b91d7224d8c9af845acf1410e694cefdd4f977a0845cc9f

  • SHA512

    1ba9b4114eef68df7d4a77f9f02dc484e953b1bffd29181a4685fce8b37358ab34b9b2d0531ee8fd3573301a1ad98e0bb0445ea377f4e25be9fa6342b4246193

  • SSDEEP

    12288:e5frSJnIvvIvKBw83Ai4k4PHrpNkj3QmwS:e9InWIKBw83kPE3Q

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      e247dc96ef358a7a8b91d7224d8c9af845acf1410e694cefdd4f977a0845cc9f

    • Size

      595KB

    • MD5

      6ba89295d9ec47899d50ef552b4b8353

    • SHA1

      6df0ab0529c83b6fd8ccb4eb4b43c8105b1c788a

    • SHA256

      e247dc96ef358a7a8b91d7224d8c9af845acf1410e694cefdd4f977a0845cc9f

    • SHA512

      1ba9b4114eef68df7d4a77f9f02dc484e953b1bffd29181a4685fce8b37358ab34b9b2d0531ee8fd3573301a1ad98e0bb0445ea377f4e25be9fa6342b4246193

    • SSDEEP

      12288:e5frSJnIvvIvKBw83Ai4k4PHrpNkj3QmwS:e9InWIKBw83kPE3Q

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks