Overview

overview

10

Static

static

9ddabb3571...30.exe

windows7-x64

10

9ddabb3571...30.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9ddabb357143ce977994fcfc073bfd65139f822a04e4d5b08450f6a5859cf730

  • Size

    280KB

  • Sample

    221004-em671abff7

  • MD5

    4601c25143cde46e693ad4ed22192210

  • SHA1

    73cdf473d88f98b7ac4554b1168317e8642510b1

  • SHA256

    9ddabb357143ce977994fcfc073bfd65139f822a04e4d5b08450f6a5859cf730

  • SHA512

    77ba53c06b98e75fddb79f91aca9d77b954d5e5c30a24716bfb0111f5bea51a2f40e670bf59ef5093e63617e3478a146d8eefc5f9f1c6f9b02858a070388ec1b

  • SSDEEP

    3072:/kW/v6vIkT/Ozb1/7Vc1tdjZQQLnQhhFBZ8Irfdaqebssot7rFVtWzdbcOBX+I:/P6IK2bVMJuQ0hhFnfdaJqNrtWzCC5

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      9ddabb357143ce977994fcfc073bfd65139f822a04e4d5b08450f6a5859cf730

    • Size

      280KB

    • MD5

      4601c25143cde46e693ad4ed22192210

    • SHA1

      73cdf473d88f98b7ac4554b1168317e8642510b1

    • SHA256

      9ddabb357143ce977994fcfc073bfd65139f822a04e4d5b08450f6a5859cf730

    • SHA512

      77ba53c06b98e75fddb79f91aca9d77b954d5e5c30a24716bfb0111f5bea51a2f40e670bf59ef5093e63617e3478a146d8eefc5f9f1c6f9b02858a070388ec1b

    • SSDEEP

      3072:/kW/v6vIkT/Ozb1/7Vc1tdjZQQLnQhhFBZ8Irfdaqebssot7rFVtWzdbcOBX+I:/P6IK2bVMJuQ0hhFnfdaJqNrtWzCC5

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks