Overview

overview

10

Static

static

44c633d67e...1c.exe

windows7-x64

10

44c633d67e...1c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    44c633d67e10e34665c9e88e42cd9c7c52a48ca70df507089f80edacef588f1c

  • Size

    312KB

  • Sample

    221003-db36jaeebr

  • MD5

    605f6efde5e528b857cf47698e31990a

  • SHA1

    17b13bd54d474330c90409daf23cac96217174fa

  • SHA256

    44c633d67e10e34665c9e88e42cd9c7c52a48ca70df507089f80edacef588f1c

  • SHA512

    87ab60021e399cc527caaebc7009503df6792b332af0f33ccee48a2a06ca5909c10983168bd702dea3cee2587c59b040422c032076f292371345c34297bcbcfe

  • SSDEEP

    3072:eqTcefsODEeHETGngYp2jjiRzd9AD4vbHcjaZe8dwCjLh+Z3ePSiELV:eqQeURvTQftUDobcjWeWwCjoZ3ePSi

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      44c633d67e10e34665c9e88e42cd9c7c52a48ca70df507089f80edacef588f1c

    • Size

      312KB

    • MD5

      605f6efde5e528b857cf47698e31990a

    • SHA1

      17b13bd54d474330c90409daf23cac96217174fa

    • SHA256

      44c633d67e10e34665c9e88e42cd9c7c52a48ca70df507089f80edacef588f1c

    • SHA512

      87ab60021e399cc527caaebc7009503df6792b332af0f33ccee48a2a06ca5909c10983168bd702dea3cee2587c59b040422c032076f292371345c34297bcbcfe

    • SSDEEP

      3072:eqTcefsODEeHETGngYp2jjiRzd9AD4vbHcjaZe8dwCjLh+Z3ePSiELV:eqQeURvTQftUDobcjWeWwCjoZ3ePSi

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks