Overview

overview

8

Static

static

875068bcb2...55.exe

windows7-x64

8

875068bcb2...55.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    875068bcb2f6d59e1e2ba9d410ad4d29f4b94b0833af9f918c07962eb9b98c55

  • Size

    26KB

  • Sample

    221002-k35l1agfe4

  • MD5

    63e0755fdfbf9de0cf7a2953af111300

  • SHA1

    9f81c0d2f9ca4076d6b65b439926bfab3979c047

  • SHA256

    875068bcb2f6d59e1e2ba9d410ad4d29f4b94b0833af9f918c07962eb9b98c55

  • SHA512

    8091df8352777653f41e916987b31fa4d27d356c68c5c768f5ed83f013312434e4b19423521da7802df7b769ad03e2c7c546c573a6c4a185e929e321b005dcaa

  • SSDEEP

    768:q5nOnCK5+0NkJBVT9ixyZCNude5GHllixkFfcfX9yet:1kJ/YxyAo86jf2get

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      875068bcb2f6d59e1e2ba9d410ad4d29f4b94b0833af9f918c07962eb9b98c55

    • Size

      26KB

    • MD5

      63e0755fdfbf9de0cf7a2953af111300

    • SHA1

      9f81c0d2f9ca4076d6b65b439926bfab3979c047

    • SHA256

      875068bcb2f6d59e1e2ba9d410ad4d29f4b94b0833af9f918c07962eb9b98c55

    • SHA512

      8091df8352777653f41e916987b31fa4d27d356c68c5c768f5ed83f013312434e4b19423521da7802df7b769ad03e2c7c546c573a6c4a185e929e321b005dcaa

    • SSDEEP

      768:q5nOnCK5+0NkJBVT9ixyZCNude5GHllixkFfcfX9yet:1kJ/YxyAo86jf2get

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks