Overview

overview

10

Static

static

393eccb955...19.exe

windows7-x64

10

393eccb955...19.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    393eccb955178fad8c57ca811a4ab288c88045b51e15ccaefdb816be1b9d0519

  • Size

    232KB

  • Sample

    221002-sx2xxscfb2

  • MD5

    42c206e8893dd514472e93bc0fa81e82

  • SHA1

    c14a96a8db0e80d1b02f425898a7e4fdd77f6129

  • SHA256

    393eccb955178fad8c57ca811a4ab288c88045b51e15ccaefdb816be1b9d0519

  • SHA512

    25ebdd15dedfebabd8d792b94f12bce41bb54dc3cc051b5f2eab96dd085d231108c1670fa9061263aad99dc9f427d51d17fbff9267a426fe9c18bcf5e4b3a8ca

  • SSDEEP

    6144:rg3PFKs7TsyKeEqxF6snji81RUinKR3Kz+ehFnSW:GPhYAFnP

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      393eccb955178fad8c57ca811a4ab288c88045b51e15ccaefdb816be1b9d0519

    • Size

      232KB

    • MD5

      42c206e8893dd514472e93bc0fa81e82

    • SHA1

      c14a96a8db0e80d1b02f425898a7e4fdd77f6129

    • SHA256

      393eccb955178fad8c57ca811a4ab288c88045b51e15ccaefdb816be1b9d0519

    • SHA512

      25ebdd15dedfebabd8d792b94f12bce41bb54dc3cc051b5f2eab96dd085d231108c1670fa9061263aad99dc9f427d51d17fbff9267a426fe9c18bcf5e4b3a8ca

    • SSDEEP

      6144:rg3PFKs7TsyKeEqxF6snji81RUinKR3Kz+ehFnSW:GPhYAFnP

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks