Overview

overview

10

Static

static

dc2255cd73...fe.exe

windows7-x64

10

dc2255cd73...fe.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dc2255cd7332eee8a6e0f01d1170553cb6a1db7428869394721b0e07d27fc6fe

  • Size

    256KB

  • Sample

    221003-gxzxsaahd8

  • MD5

    61f9ace8dc81b1f1c0ae39528a3b10c0

  • SHA1

    dac5dea7f3e455c621838ff79af10d3e27609f93

  • SHA256

    dc2255cd7332eee8a6e0f01d1170553cb6a1db7428869394721b0e07d27fc6fe

  • SHA512

    e9f026bfa3977ff86abec1809a482e3ad9f2dc20800da7b94266211552553b209f3aad53cedae6f68119507c64f1889cd42bf715819bea2b85bd86255187832b

  • SSDEEP

    3072:S0bfWRrIMNRlZ62Pal2LBJXmzOHm5WZ3K+MCoOQ39cOaRr5ZOnd:SWepp3PJXCOGY3eZOQ39c

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      dc2255cd7332eee8a6e0f01d1170553cb6a1db7428869394721b0e07d27fc6fe

    • Size

      256KB

    • MD5

      61f9ace8dc81b1f1c0ae39528a3b10c0

    • SHA1

      dac5dea7f3e455c621838ff79af10d3e27609f93

    • SHA256

      dc2255cd7332eee8a6e0f01d1170553cb6a1db7428869394721b0e07d27fc6fe

    • SHA512

      e9f026bfa3977ff86abec1809a482e3ad9f2dc20800da7b94266211552553b209f3aad53cedae6f68119507c64f1889cd42bf715819bea2b85bd86255187832b

    • SSDEEP

      3072:S0bfWRrIMNRlZ62Pal2LBJXmzOHm5WZ3K+MCoOQ39cOaRr5ZOnd:SWepp3PJXCOGY3eZOQ39c

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks