Overview

overview

10

Static

static

ce6a7161be...7d.exe

windows7-x64

10

ce6a7161be...7d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ce6a7161be7c623d8e5d99028fc2248982a7c44d47bab647b86b12e8f6a4387d

  • Size

    216KB

  • Sample

    221003-djeg5segfr

  • MD5

    600c0fd39a0ca29a634821bb67f4c400

  • SHA1

    09e6947f5d57260b03fc4ce0678243b66568e5bc

  • SHA256

    ce6a7161be7c623d8e5d99028fc2248982a7c44d47bab647b86b12e8f6a4387d

  • SHA512

    6cc6a202d4834e68b2c3b63e034db7df52f4852e93c093d6d9113439fed505e4507a12749c94361c837e8473c9e3d59de1da2bf5165bc0b72dc161e3907d7424

  • SSDEEP

    6144:PDaZZP5XA+eMIRQwSQ4YH34AAoo070vYN0DQPwkqfS2Qh20K/BG0t7/lG1G8FGrp:L/wVZ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      ce6a7161be7c623d8e5d99028fc2248982a7c44d47bab647b86b12e8f6a4387d

    • Size

      216KB

    • MD5

      600c0fd39a0ca29a634821bb67f4c400

    • SHA1

      09e6947f5d57260b03fc4ce0678243b66568e5bc

    • SHA256

      ce6a7161be7c623d8e5d99028fc2248982a7c44d47bab647b86b12e8f6a4387d

    • SHA512

      6cc6a202d4834e68b2c3b63e034db7df52f4852e93c093d6d9113439fed505e4507a12749c94361c837e8473c9e3d59de1da2bf5165bc0b72dc161e3907d7424

    • SSDEEP

      6144:PDaZZP5XA+eMIRQwSQ4YH34AAoo070vYN0DQPwkqfS2Qh20K/BG0t7/lG1G8FGrp:L/wVZ

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks