Overview

overview

10

Static

static

7aa034b599...96.exe

windows7-x64

10

7aa034b599...96.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7aa034b5999fd6d3abce5d14389567174a97597783faf10db1fc5184e085f196

  • Size

    344KB

  • Sample

    221002-agbrpaedcl

  • MD5

    72222466881e5fa1331572fa3e263831

  • SHA1

    2ae8dc11196e050c464436009fa8d527506ff7c7

  • SHA256

    7aa034b5999fd6d3abce5d14389567174a97597783faf10db1fc5184e085f196

  • SHA512

    d804c0e5ef383f3298e6bbc5bbb1aec877d4f4ed461648791352cfc5034a19616f53e0416cf7a6d91b75089b980c25c09730716ee6bb07f0674684a5f8fcd7b8

  • SSDEEP

    6144:t2YUVB0T1aG9SWK/fObT/bGidhjhxEF0N3hL7VklVA3MZLhcYm9e4yqyQhNNnSZ+:tdUVB0T1nwWK/fObT/bGiA0NFVkWMZLo

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      7aa034b5999fd6d3abce5d14389567174a97597783faf10db1fc5184e085f196

    • Size

      344KB

    • MD5

      72222466881e5fa1331572fa3e263831

    • SHA1

      2ae8dc11196e050c464436009fa8d527506ff7c7

    • SHA256

      7aa034b5999fd6d3abce5d14389567174a97597783faf10db1fc5184e085f196

    • SHA512

      d804c0e5ef383f3298e6bbc5bbb1aec877d4f4ed461648791352cfc5034a19616f53e0416cf7a6d91b75089b980c25c09730716ee6bb07f0674684a5f8fcd7b8

    • SSDEEP

      6144:t2YUVB0T1aG9SWK/fObT/bGidhjhxEF0N3hL7VklVA3MZLhcYm9e4yqyQhNNnSZ+:tdUVB0T1nwWK/fObT/bGiA0NFVkWMZLo

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks