Overview

overview

10

Static

static

a5b7d94220...90.exe

windows7-x64

10

a5b7d94220...90.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a5b7d942203b0a3d45038354ed4a267aa3f91850d383d07e04b0af5f9a7cc390

  • Size

    252KB

  • Sample

    221003-c786zsecfp

  • MD5

    61dc4c99c869c2d5e470ec6c634596b9

  • SHA1

    1aa6efa6a11a8b0971f91dc4acc612c2f22eb4b6

  • SHA256

    a5b7d942203b0a3d45038354ed4a267aa3f91850d383d07e04b0af5f9a7cc390

  • SHA512

    986d508856c69d193cbc5eaaa6f8429c68114546772958e114a4920732f0049322d2fc64da6b4118551860d1962e1aa3a2be9d86bd7c161659813f99d4818ac9

  • SSDEEP

    6144:2KloVsOi3E8S7SLDvVYhlEMxqi4riPFs/eQkl:Nloex3E8S7SLDvVYhlEMxqi4riPFs/Rk

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a5b7d942203b0a3d45038354ed4a267aa3f91850d383d07e04b0af5f9a7cc390

    • Size

      252KB

    • MD5

      61dc4c99c869c2d5e470ec6c634596b9

    • SHA1

      1aa6efa6a11a8b0971f91dc4acc612c2f22eb4b6

    • SHA256

      a5b7d942203b0a3d45038354ed4a267aa3f91850d383d07e04b0af5f9a7cc390

    • SHA512

      986d508856c69d193cbc5eaaa6f8429c68114546772958e114a4920732f0049322d2fc64da6b4118551860d1962e1aa3a2be9d86bd7c161659813f99d4818ac9

    • SSDEEP

      6144:2KloVsOi3E8S7SLDvVYhlEMxqi4riPFs/eQkl:Nloex3E8S7SLDvVYhlEMxqi4riPFs/Rk

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks