Overview

overview

10

Static

static

7c738b5564...aa.exe

windows7-x64

10

7c738b5564...aa.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7c738b55640b065a33a7e4dd251eaaa2218ad88585e8ab9820c6b822f5ddcfaa

  • Size

    60KB

  • Sample

    221003-dv9sesdhf6

  • MD5

    559a9fa12abf31d0a3882ada3b3e914c

  • SHA1

    58fa144adab194de0f7a644299a98f1cd8693a08

  • SHA256

    7c738b55640b065a33a7e4dd251eaaa2218ad88585e8ab9820c6b822f5ddcfaa

  • SHA512

    4b8ac14a52cdd4eb944f972f62f4d0beda80dfe1ff1f53133f87bb13955ca7563b0c82f1cd9ac4e7b947ac37de75e98c62cc1f42dac1d60c529571e2a2e88fe4

  • SSDEEP

    1536:VZIThxeVnBvmiINMK9VmZxrUOjD5MJ3hg:shmS45D5M

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      7c738b55640b065a33a7e4dd251eaaa2218ad88585e8ab9820c6b822f5ddcfaa

    • Size

      60KB

    • MD5

      559a9fa12abf31d0a3882ada3b3e914c

    • SHA1

      58fa144adab194de0f7a644299a98f1cd8693a08

    • SHA256

      7c738b55640b065a33a7e4dd251eaaa2218ad88585e8ab9820c6b822f5ddcfaa

    • SHA512

      4b8ac14a52cdd4eb944f972f62f4d0beda80dfe1ff1f53133f87bb13955ca7563b0c82f1cd9ac4e7b947ac37de75e98c62cc1f42dac1d60c529571e2a2e88fe4

    • SSDEEP

      1536:VZIThxeVnBvmiINMK9VmZxrUOjD5MJ3hg:shmS45D5M

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks