Overview

overview

10

Static

static

18c3d59860...42.exe

windows7-x64

10

18c3d59860...42.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    18c3d59860d21348e2338ecc96e620479cda1a7513e1034791eaac33aa10f042

  • Size

    212KB

  • Sample

    221003-t3ng6aehgm

  • MD5

    6212729be1fa171c7b5a704e501fd6a3

  • SHA1

    bc39007f3d0b342560b3fb6642eed05efae3f37d

  • SHA256

    18c3d59860d21348e2338ecc96e620479cda1a7513e1034791eaac33aa10f042

  • SHA512

    e565b783579e4948228aaeb9af2b3d0adf4f3a9de4338989a7e95e62e97b23e486618675a539c187b20987e7fb89b832ae7c3d7c51d5e7246d9b436956ffb83f

  • SSDEEP

    3072:ZJWf33OCzgWNcssT2SSXzBNVATA9ZpqT4c36I/odrb/q:ZJggWRsTKBNVATA9Z885tdf/q

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      18c3d59860d21348e2338ecc96e620479cda1a7513e1034791eaac33aa10f042

    • Size

      212KB

    • MD5

      6212729be1fa171c7b5a704e501fd6a3

    • SHA1

      bc39007f3d0b342560b3fb6642eed05efae3f37d

    • SHA256

      18c3d59860d21348e2338ecc96e620479cda1a7513e1034791eaac33aa10f042

    • SHA512

      e565b783579e4948228aaeb9af2b3d0adf4f3a9de4338989a7e95e62e97b23e486618675a539c187b20987e7fb89b832ae7c3d7c51d5e7246d9b436956ffb83f

    • SSDEEP

      3072:ZJWf33OCzgWNcssT2SSXzBNVATA9ZpqT4c36I/odrb/q:ZJggWRsTKBNVATA9Z885tdf/q

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks