Overview

overview

10

Static

static

1fc75a9d00...b2.exe

windows7-x64

10

1fc75a9d00...b2.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1fc75a9d0008c87cfa0555c86d98d2b5e8c92c8ee3c4f3cf33d4f8d40daa6ab2

  • Size

    60KB

  • Sample

    221003-dv548sfdak

  • MD5

    6639d75b627dc2ae8e0b8e6f456ca46c

  • SHA1

    8db2f2cba51cc7c2ea4df92b385f9599b53aa6df

  • SHA256

    1fc75a9d0008c87cfa0555c86d98d2b5e8c92c8ee3c4f3cf33d4f8d40daa6ab2

  • SHA512

    b12394cc21a61ecc7e530cad3275b8d8c0249f0c0ffecd0bb6a995c63748f67fd7e18f2ac1112279542b8ba0a522ebafb74dc80e1722ead531886fc297207ac5

  • SSDEEP

    1536:eYCIuKb25Xh3/lZ0NMqM2tFbl4SGnKizPnwAQgywE:WIj253YV

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1fc75a9d0008c87cfa0555c86d98d2b5e8c92c8ee3c4f3cf33d4f8d40daa6ab2

    • Size

      60KB

    • MD5

      6639d75b627dc2ae8e0b8e6f456ca46c

    • SHA1

      8db2f2cba51cc7c2ea4df92b385f9599b53aa6df

    • SHA256

      1fc75a9d0008c87cfa0555c86d98d2b5e8c92c8ee3c4f3cf33d4f8d40daa6ab2

    • SHA512

      b12394cc21a61ecc7e530cad3275b8d8c0249f0c0ffecd0bb6a995c63748f67fd7e18f2ac1112279542b8ba0a522ebafb74dc80e1722ead531886fc297207ac5

    • SSDEEP

      1536:eYCIuKb25Xh3/lZ0NMqM2tFbl4SGnKizPnwAQgywE:WIj253YV

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks