Overview

overview

10

Static

static

67a266d88e...59.exe

windows7-x64

10

67a266d88e...59.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    67a266d88eacc3ec0e63d3daab1bb4b40450d6ce9af44ca61226b4293eff3159

  • Size

    907KB

  • Sample

    221003-yhrrasdbb8

  • MD5

    619c8a0ad96ffcfc0cb8ca66ba814046

  • SHA1

    83cf172bdd3672e749f8fcd48c5f280b6d95bda6

  • SHA256

    67a266d88eacc3ec0e63d3daab1bb4b40450d6ce9af44ca61226b4293eff3159

  • SHA512

    267a72c05db0fc133544cce9163a1c2541af92c9935dce70abf1a971ff046327b24efc68d03760c77f2dd36f06e929cb65e32ad0b518c837291aeb0768ceaebb

  • SSDEEP

    12288:HWOoB2arIiBDLzzV+XMHdUOYDapL8h+1LFT:HWOoB2arIUDLl+XfDKL8h+zT

Score
10/10
persistence

Malware Config

Targets

    • Target

      67a266d88eacc3ec0e63d3daab1bb4b40450d6ce9af44ca61226b4293eff3159

    • Size

      907KB

    • MD5

      619c8a0ad96ffcfc0cb8ca66ba814046

    • SHA1

      83cf172bdd3672e749f8fcd48c5f280b6d95bda6

    • SHA256

      67a266d88eacc3ec0e63d3daab1bb4b40450d6ce9af44ca61226b4293eff3159

    • SHA512

      267a72c05db0fc133544cce9163a1c2541af92c9935dce70abf1a971ff046327b24efc68d03760c77f2dd36f06e929cb65e32ad0b518c837291aeb0768ceaebb

    • SSDEEP

      12288:HWOoB2arIiBDLzzV+XMHdUOYDapL8h+1LFT:HWOoB2arIUDLl+XfDKL8h+zT

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks