Overview

overview

10

Static

static

b2aa374902...b8.exe

windows7-x64

10

b2aa374902...b8.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b2aa3749020a4038daf7cdea45008ba26bf6ff9b12a7df801ad7f33c59ffd4b8

  • Size

    108KB

  • Sample

    221002-adn8lsdaa7

  • MD5

    6412492cb3f44d66d8f68891645d97b0

  • SHA1

    ae7bd56d73624b832f6db3fe01b4aa889b5e2b81

  • SHA256

    b2aa3749020a4038daf7cdea45008ba26bf6ff9b12a7df801ad7f33c59ffd4b8

  • SHA512

    b35aa14610ec8eac22946094b5447f0652e2a13f75335be475dbf507896fe8567ef9b8580c30586a66e946384fba5e281861e35ce919a204d08f3f617928b737

  • SSDEEP

    1536:bG+MKiB6oQ7Lh5+sXmNP0ttlPXLq0zTrk3:qDmoIeZPsXTzTo3

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b2aa3749020a4038daf7cdea45008ba26bf6ff9b12a7df801ad7f33c59ffd4b8

    • Size

      108KB

    • MD5

      6412492cb3f44d66d8f68891645d97b0

    • SHA1

      ae7bd56d73624b832f6db3fe01b4aa889b5e2b81

    • SHA256

      b2aa3749020a4038daf7cdea45008ba26bf6ff9b12a7df801ad7f33c59ffd4b8

    • SHA512

      b35aa14610ec8eac22946094b5447f0652e2a13f75335be475dbf507896fe8567ef9b8580c30586a66e946384fba5e281861e35ce919a204d08f3f617928b737

    • SSDEEP

      1536:bG+MKiB6oQ7Lh5+sXmNP0ttlPXLq0zTrk3:qDmoIeZPsXTzTo3

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks