Overview

overview

10

Static

static

d6b6b74299...0f.exe

windows7-x64

10

d6b6b74299...0f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d6b6b7429980bebeb1dc9e7c337e961b6a2c472240c4a2edf26eefcaafad5b0f

  • Size

    264KB

  • Sample

    221003-dkl9daehcm

  • MD5

    6ac2fa06f89c87452c2e202f24869690

  • SHA1

    14fcd2dbab02db06bbee15525cc47be2bdc9d98f

  • SHA256

    d6b6b7429980bebeb1dc9e7c337e961b6a2c472240c4a2edf26eefcaafad5b0f

  • SHA512

    25d881005c3711af30e490814ea5359f3ecf10ca74fb7fb03dfaf0a5e42e07e6f171b6c4b029975e64cd312d400082409bbf09a16712928e529a135d639b11df

  • SSDEEP

    3072:VwwQcqsO6zI2IDyG2pfr4GNLzECcKIvMBSYWunCvPQiwhjXH1hkaBx5/lvnjLYa7:6wQ3sO689Ic6OLynWunzXH1l9rt

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d6b6b7429980bebeb1dc9e7c337e961b6a2c472240c4a2edf26eefcaafad5b0f

    • Size

      264KB

    • MD5

      6ac2fa06f89c87452c2e202f24869690

    • SHA1

      14fcd2dbab02db06bbee15525cc47be2bdc9d98f

    • SHA256

      d6b6b7429980bebeb1dc9e7c337e961b6a2c472240c4a2edf26eefcaafad5b0f

    • SHA512

      25d881005c3711af30e490814ea5359f3ecf10ca74fb7fb03dfaf0a5e42e07e6f171b6c4b029975e64cd312d400082409bbf09a16712928e529a135d639b11df

    • SSDEEP

      3072:VwwQcqsO6zI2IDyG2pfr4GNLzECcKIvMBSYWunCvPQiwhjXH1hkaBx5/lvnjLYa7:6wQ3sO689Ic6OLynWunzXH1l9rt

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks