Overview

overview

10

Static

static

d8f76656bb...5c.exe

windows7-x64

10

d8f76656bb...5c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d8f76656bb977284e56918858e8b8bc0b4f9d968373150f140e75ddb12e0e85c

  • Size

    204KB

  • Sample

    221003-ttlxzaeecq

  • MD5

    385de5f4929f440ed449b4a09e8a5064

  • SHA1

    090319e4dbd7cea4b818b9a44897f65d94c0fed1

  • SHA256

    d8f76656bb977284e56918858e8b8bc0b4f9d968373150f140e75ddb12e0e85c

  • SHA512

    427fc94dd692ba7b587e11721845725bd75b28721f792f4fe1cee921d43d5d86032bc897114a4246804fc80f3649f8bcee8b52a49ea73e9c9a280a849e9f2a65

  • SSDEEP

    3072:XmsW8Obv0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUWVXI:WhnD4QxL7B9W0c1RCzR/fSmluY

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d8f76656bb977284e56918858e8b8bc0b4f9d968373150f140e75ddb12e0e85c

    • Size

      204KB

    • MD5

      385de5f4929f440ed449b4a09e8a5064

    • SHA1

      090319e4dbd7cea4b818b9a44897f65d94c0fed1

    • SHA256

      d8f76656bb977284e56918858e8b8bc0b4f9d968373150f140e75ddb12e0e85c

    • SHA512

      427fc94dd692ba7b587e11721845725bd75b28721f792f4fe1cee921d43d5d86032bc897114a4246804fc80f3649f8bcee8b52a49ea73e9c9a280a849e9f2a65

    • SSDEEP

      3072:XmsW8Obv0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUWVXI:WhnD4QxL7B9W0c1RCzR/fSmluY

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks