Overview

overview

10

Static

static

d13a21f28f...53.exe

windows7-x64

10

d13a21f28f...53.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d13a21f28f5008e2ff4ff40776b7e2a10196b6986c28c4ed1bea1a047987e053

  • Size

    118KB

  • Sample

    221011-bdxqesgcg6

  • MD5

    46e640cea40217f1b8cd582184c798b3

  • SHA1

    728bb6be9a60b3d773ee1ac01e68c3454d386c68

  • SHA256

    d13a21f28f5008e2ff4ff40776b7e2a10196b6986c28c4ed1bea1a047987e053

  • SHA512

    b5d23f6c6b266eec425e749efcfedaaa544397ede2ba32d0bcc1691eb30efcd684fe476167150b22524d5c9a16feaf7a15107667155024e03eddc6b273121e9c

  • SSDEEP

    1536:BiwR7wjJltueHk5Z6BnZIpDkYeL0tALm/3C2hktkJxUe+9/nwodoYUoyJKrFVfo:39eJlMv5UypnGyALN+xU9ntnUoyefo

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d13a21f28f5008e2ff4ff40776b7e2a10196b6986c28c4ed1bea1a047987e053

    • Size

      118KB

    • MD5

      46e640cea40217f1b8cd582184c798b3

    • SHA1

      728bb6be9a60b3d773ee1ac01e68c3454d386c68

    • SHA256

      d13a21f28f5008e2ff4ff40776b7e2a10196b6986c28c4ed1bea1a047987e053

    • SHA512

      b5d23f6c6b266eec425e749efcfedaaa544397ede2ba32d0bcc1691eb30efcd684fe476167150b22524d5c9a16feaf7a15107667155024e03eddc6b273121e9c

    • SSDEEP

      1536:BiwR7wjJltueHk5Z6BnZIpDkYeL0tALm/3C2hktkJxUe+9/nwodoYUoyJKrFVfo:39eJlMv5UypnGyALN+xU9ntnUoyefo

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks