Overview

overview

10

Static

static

af05c12602...71.exe

windows7-x64

10

af05c12602...71.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    af05c1260263ea0eaf5c313e979bef7ccbb0aa26f94ec980cf5d0f3c8aafe771

  • Size

    232KB

  • Sample

    221002-jg4xxafdek

  • MD5

    66a6101e1f1fef0b04c59845cff4be84

  • SHA1

    8412cee31c0e0749a6c3ccf983dbf72f55c3f5d2

  • SHA256

    af05c1260263ea0eaf5c313e979bef7ccbb0aa26f94ec980cf5d0f3c8aafe771

  • SHA512

    f973e9934609903adc51968671ad64c48733e0d8d3ca1dcc8ee88aa80127ab9a4b531daa728f07bb5cddd8e122885907e1a5b1496b74372375ccf38441172ac1

  • SSDEEP

    3072:E6efWRrIMNRlZ62Pal2LBJXmzOHm5WZ3K+MCahFqTcWEyxeL2mDHLz/5L5Ihr6Um:Erepp3PJXCOGY3eLFRFyMdL5Ihr6Um

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      af05c1260263ea0eaf5c313e979bef7ccbb0aa26f94ec980cf5d0f3c8aafe771

    • Size

      232KB

    • MD5

      66a6101e1f1fef0b04c59845cff4be84

    • SHA1

      8412cee31c0e0749a6c3ccf983dbf72f55c3f5d2

    • SHA256

      af05c1260263ea0eaf5c313e979bef7ccbb0aa26f94ec980cf5d0f3c8aafe771

    • SHA512

      f973e9934609903adc51968671ad64c48733e0d8d3ca1dcc8ee88aa80127ab9a4b531daa728f07bb5cddd8e122885907e1a5b1496b74372375ccf38441172ac1

    • SSDEEP

      3072:E6efWRrIMNRlZ62Pal2LBJXmzOHm5WZ3K+MCahFqTcWEyxeL2mDHLz/5L5Ihr6Um:Erepp3PJXCOGY3eLFRFyMdL5Ihr6Um

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks