Overview

overview

10

Static

static

c4046dc506...a7.exe

windows7-x64

10

c4046dc506...a7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c4046dc50657a3478bcd0b3f1a364a38454897d3bc8be3f65f5ebe400a79faa7

  • Size

    172KB

  • Sample

    221003-dsf3bsdgc5

  • MD5

    60ffc562df5359456d3ec1d45d698f83

  • SHA1

    05963a6c52b1b1ba37e9296109acfc2ee5d8b7f6

  • SHA256

    c4046dc50657a3478bcd0b3f1a364a38454897d3bc8be3f65f5ebe400a79faa7

  • SHA512

    b71ff34532ad3a519add15eb67fac432d0ca25140113317c80ac5b10d7c2d949594c21153202199c85d5c8eaa0b93b5f0ee4614941b00c2d33f8df7fd4d175a9

  • SSDEEP

    3072:CCq+cv+4xLKGPQb6pLnq1AbpaMAePjT9273c0Iy8onzK9:uxxLKGPQbWqliF27MHsK

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c4046dc50657a3478bcd0b3f1a364a38454897d3bc8be3f65f5ebe400a79faa7

    • Size

      172KB

    • MD5

      60ffc562df5359456d3ec1d45d698f83

    • SHA1

      05963a6c52b1b1ba37e9296109acfc2ee5d8b7f6

    • SHA256

      c4046dc50657a3478bcd0b3f1a364a38454897d3bc8be3f65f5ebe400a79faa7

    • SHA512

      b71ff34532ad3a519add15eb67fac432d0ca25140113317c80ac5b10d7c2d949594c21153202199c85d5c8eaa0b93b5f0ee4614941b00c2d33f8df7fd4d175a9

    • SSDEEP

      3072:CCq+cv+4xLKGPQb6pLnq1AbpaMAePjT9273c0Iy8onzK9:uxxLKGPQbWqliF27MHsK

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks