Overview

overview

10

Static

static

57d9018bcf...0d.exe

windows7-x64

10

57d9018bcf...0d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    57d9018bcf1d303ad819ac87b5604a53355ff51162ba4ddb7e16eeba640ec40d

  • Size

    284KB

  • Sample

    221003-dpbnfadeh6

  • MD5

    61c69fcc2fd40e282d7a0ad5b65a92b0

  • SHA1

    63675e9c06274b049cf44a9450d438fe83db5869

  • SHA256

    57d9018bcf1d303ad819ac87b5604a53355ff51162ba4ddb7e16eeba640ec40d

  • SHA512

    f95347be8a2e7570c8488698766b10d6fd908863dd46e23b5040bcbeaf34d53822479f3c6ef5de98ff626742ea2436af8a3449e0c01e8e24d60a46506025358b

  • SSDEEP

    3072:y0A2afa1abn4DpS41Zr8EbjfmNwXl1RgxfGDP8F2dqMOkeuF7SzoBBXGl:Ray1az4Dp7R8cA0l1RpLtJj7SknU

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      57d9018bcf1d303ad819ac87b5604a53355ff51162ba4ddb7e16eeba640ec40d

    • Size

      284KB

    • MD5

      61c69fcc2fd40e282d7a0ad5b65a92b0

    • SHA1

      63675e9c06274b049cf44a9450d438fe83db5869

    • SHA256

      57d9018bcf1d303ad819ac87b5604a53355ff51162ba4ddb7e16eeba640ec40d

    • SHA512

      f95347be8a2e7570c8488698766b10d6fd908863dd46e23b5040bcbeaf34d53822479f3c6ef5de98ff626742ea2436af8a3449e0c01e8e24d60a46506025358b

    • SSDEEP

      3072:y0A2afa1abn4DpS41Zr8EbjfmNwXl1RgxfGDP8F2dqMOkeuF7SzoBBXGl:Ray1az4Dp7R8cA0l1RpLtJj7SknU

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks