Overview

overview

10

Static

static

46a6102abb...cd.exe

windows7-x64

10

46a6102abb...cd.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    46a6102abbe69bbd50adce62d07be46216d5c86825eabd8ab1c5d572557c3acd

  • Size

    304KB

  • Sample

    221002-ajgeyseecr

  • MD5

    6e5e077a47db1be90ff2154411555510

  • SHA1

    ad681b1b5798d43e6c0d6fdd0da1880198557494

  • SHA256

    46a6102abbe69bbd50adce62d07be46216d5c86825eabd8ab1c5d572557c3acd

  • SHA512

    6704a1d47a5a9a2430c5250bf0c6a6707ccf2822ff922b9663906704cc34a007b2d20a11c28bbaef7e1eaf5a5fa43006ed29e97558ca2ee9fa320889a53f3f40

  • SSDEEP

    3072:HiDh8sRsjFBbVJsnCRcG3xo8oHYHMJSRBPpACNnXwo7A3B7zYQCASCPepFq:HiDKsAfsnH0IH4ACNnAxzrCAfPepF

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      46a6102abbe69bbd50adce62d07be46216d5c86825eabd8ab1c5d572557c3acd

    • Size

      304KB

    • MD5

      6e5e077a47db1be90ff2154411555510

    • SHA1

      ad681b1b5798d43e6c0d6fdd0da1880198557494

    • SHA256

      46a6102abbe69bbd50adce62d07be46216d5c86825eabd8ab1c5d572557c3acd

    • SHA512

      6704a1d47a5a9a2430c5250bf0c6a6707ccf2822ff922b9663906704cc34a007b2d20a11c28bbaef7e1eaf5a5fa43006ed29e97558ca2ee9fa320889a53f3f40

    • SSDEEP

      3072:HiDh8sRsjFBbVJsnCRcG3xo8oHYHMJSRBPpACNnXwo7A3B7zYQCASCPepFq:HiDKsAfsnH0IH4ACNnAxzrCAfPepF

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks