Overview

overview

8

Static

static

bcda0d7635...85.exe

windows7-x64

8

bcda0d7635...85.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    bcda0d7635c0922f6b3a2686a138e1bcd462c0312348a8751a0f5c8bd9aae585

  • Size

    43KB

  • Sample

    221004-h76zhsheak

  • MD5

    4928d60f00050b3afe71851a46ccdac0

  • SHA1

    65f12d289fb2e769f48b3059d4d6e713a47a5a5f

  • SHA256

    bcda0d7635c0922f6b3a2686a138e1bcd462c0312348a8751a0f5c8bd9aae585

  • SHA512

    a7d09369c1673c246456534dbb367a30c7406f46377bb188a3c733ce3ff932cf70b32a39e47ffe049a6d9ce14e8f7ceb2672b58419d8922f1bdc3482f556f862

  • SSDEEP

    768:ZCjzJ8ytcXTSqiw/ir+9WTW2il5M1g6H7jHv2dqvtq1IYsL1uHCRUNmqAgHCCjPJ:ieWfJVXFWEYCRU3HCCrk

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      bcda0d7635c0922f6b3a2686a138e1bcd462c0312348a8751a0f5c8bd9aae585

    • Size

      43KB

    • MD5

      4928d60f00050b3afe71851a46ccdac0

    • SHA1

      65f12d289fb2e769f48b3059d4d6e713a47a5a5f

    • SHA256

      bcda0d7635c0922f6b3a2686a138e1bcd462c0312348a8751a0f5c8bd9aae585

    • SHA512

      a7d09369c1673c246456534dbb367a30c7406f46377bb188a3c733ce3ff932cf70b32a39e47ffe049a6d9ce14e8f7ceb2672b58419d8922f1bdc3482f556f862

    • SSDEEP

      768:ZCjzJ8ytcXTSqiw/ir+9WTW2il5M1g6H7jHv2dqvtq1IYsL1uHCRUNmqAgHCCjPJ:ieWfJVXFWEYCRU3HCCrk

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks