Overview

overview

10

Static

static

67cb2611bc...29.exe

windows7-x64

10

67cb2611bc...29.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    67cb2611bc705bf83b723f9228de414cc40f45d4d0c793ccdbd03d6bec4d1a29

  • Size

    212KB

  • Sample

    221003-dj5pbsddc6

  • MD5

    47d725e3774e701ec60b50fd0e3247d0

  • SHA1

    153884d3dc0e5b900786b5064dcca9d5816d9efd

  • SHA256

    67cb2611bc705bf83b723f9228de414cc40f45d4d0c793ccdbd03d6bec4d1a29

  • SHA512

    3b5b850ac474af281aa4cb0c99406d37944379fbc81fb2780e1c5782928bac2bc04a2aaf6bdff97adff67b3552a41e916e835fb8e882cd3f24a13d64f9d9b238

  • SSDEEP

    3072:R9UB99PLzksJhGYiNAcXOqQnys80/p5GomjRMEQYbLlmuPU+BfPc1rPU35pJucy0:RqBjiOqQn580/JXEJpc1rPni

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      67cb2611bc705bf83b723f9228de414cc40f45d4d0c793ccdbd03d6bec4d1a29

    • Size

      212KB

    • MD5

      47d725e3774e701ec60b50fd0e3247d0

    • SHA1

      153884d3dc0e5b900786b5064dcca9d5816d9efd

    • SHA256

      67cb2611bc705bf83b723f9228de414cc40f45d4d0c793ccdbd03d6bec4d1a29

    • SHA512

      3b5b850ac474af281aa4cb0c99406d37944379fbc81fb2780e1c5782928bac2bc04a2aaf6bdff97adff67b3552a41e916e835fb8e882cd3f24a13d64f9d9b238

    • SSDEEP

      3072:R9UB99PLzksJhGYiNAcXOqQnys80/p5GomjRMEQYbLlmuPU+BfPc1rPU35pJucy0:RqBjiOqQn580/JXEJpc1rPni

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks