Overview

overview

10

Static

static

837bad4ed8...ea.exe

windows7-x64

10

837bad4ed8...ea.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    837bad4ed8cef3d6dbc091cf652010d8b3241e5899ca82e98f0e4e58210ca6ea

  • Size

    348KB

  • Sample

    221011-cza9zsbbhk

  • MD5

    29961eb08597ce7123e548d2bf38ff52

  • SHA1

    03761d37bd79ff775eaf4790dc07992f485c5909

  • SHA256

    837bad4ed8cef3d6dbc091cf652010d8b3241e5899ca82e98f0e4e58210ca6ea

  • SHA512

    d287eeb2cefa4dd4401193b1db1c06996080bfb384002bac3267b3289594dadfa9f15eaaacd026ed6f770bcf4082c492aca2a570d86f7094b80655825984f69b

  • SSDEEP

    6144:gDCwfG1bnxG848KJ+oDCwfG1bnxG848KJ+X:g72bnIh8KJ+o72bnIh8KJ+X

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      837bad4ed8cef3d6dbc091cf652010d8b3241e5899ca82e98f0e4e58210ca6ea

    • Size

      348KB

    • MD5

      29961eb08597ce7123e548d2bf38ff52

    • SHA1

      03761d37bd79ff775eaf4790dc07992f485c5909

    • SHA256

      837bad4ed8cef3d6dbc091cf652010d8b3241e5899ca82e98f0e4e58210ca6ea

    • SHA512

      d287eeb2cefa4dd4401193b1db1c06996080bfb384002bac3267b3289594dadfa9f15eaaacd026ed6f770bcf4082c492aca2a570d86f7094b80655825984f69b

    • SSDEEP

      6144:gDCwfG1bnxG848KJ+oDCwfG1bnxG848KJ+X:g72bnIh8KJ+o72bnIh8KJ+X

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks