Overview

overview

10

Static

static

75852b9bb0...0e.exe

windows7-x64

10

75852b9bb0...0e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    75852b9bb0ce01c6da90b974ca49d4e56bcf41315bc2ba9935e9fedc45313a0e

  • Size

    276KB

  • Sample

    221003-tyzpmaegf9

  • MD5

    313c02f0685ba9e4aa7df56d62e12e82

  • SHA1

    6c5ac4953e8e9331cf14ce007f4fb93dc65bba77

  • SHA256

    75852b9bb0ce01c6da90b974ca49d4e56bcf41315bc2ba9935e9fedc45313a0e

  • SHA512

    482ed4a9701ece7eb982fa8b3162714380933709d485894e32d0d33955f61b1c18b42afb7312488b42442c9a649a4c40519b0d75e0a43b308becf654b78afcdb

  • SSDEEP

    6144:C5lavQHcZQ2hqU+6ONGn0BbjvwC1SL3HAijW46B+l:C5lavmcZQ2hqU+VNGn0RjvwC1SxjW466

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      75852b9bb0ce01c6da90b974ca49d4e56bcf41315bc2ba9935e9fedc45313a0e

    • Size

      276KB

    • MD5

      313c02f0685ba9e4aa7df56d62e12e82

    • SHA1

      6c5ac4953e8e9331cf14ce007f4fb93dc65bba77

    • SHA256

      75852b9bb0ce01c6da90b974ca49d4e56bcf41315bc2ba9935e9fedc45313a0e

    • SHA512

      482ed4a9701ece7eb982fa8b3162714380933709d485894e32d0d33955f61b1c18b42afb7312488b42442c9a649a4c40519b0d75e0a43b308becf654b78afcdb

    • SSDEEP

      6144:C5lavQHcZQ2hqU+6ONGn0BbjvwC1SL3HAijW46B+l:C5lavmcZQ2hqU+VNGn0RjvwC1SxjW466

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks