Overview

overview

10

Static

static

7528a08ee1...30.exe

windows7-x64

10

7528a08ee1...30.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7528a08ee168e67b9b4b6a7383e851e028303a64d171679de3f355f6fc5f1230

  • Size

    240KB

  • Sample

    221011-lpqrcsgfgl

  • MD5

    2ad57e6c403762e54c645f2a4f89dbd0

  • SHA1

    0192de848197aa516cc4bc79f93bd56c14f35469

  • SHA256

    7528a08ee168e67b9b4b6a7383e851e028303a64d171679de3f355f6fc5f1230

  • SHA512

    1b85c6cb7279a89578ee91e73aec45963591fa7816eab92cf35e6eb849cfe0d1090f2480643437fcac27b01b945351e4aa441ba76fa5283827a13a2d6fc1908f

  • SSDEEP

    3072:xkNaT8j6VlpvBd90i/SmWKLi7CjFSivnfu3fbMdozt5cz7/:xl0UGKGkFRKfeoztO

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      7528a08ee168e67b9b4b6a7383e851e028303a64d171679de3f355f6fc5f1230

    • Size

      240KB

    • MD5

      2ad57e6c403762e54c645f2a4f89dbd0

    • SHA1

      0192de848197aa516cc4bc79f93bd56c14f35469

    • SHA256

      7528a08ee168e67b9b4b6a7383e851e028303a64d171679de3f355f6fc5f1230

    • SHA512

      1b85c6cb7279a89578ee91e73aec45963591fa7816eab92cf35e6eb849cfe0d1090f2480643437fcac27b01b945351e4aa441ba76fa5283827a13a2d6fc1908f

    • SSDEEP

      3072:xkNaT8j6VlpvBd90i/SmWKLi7CjFSivnfu3fbMdozt5cz7/:xl0UGKGkFRKfeoztO

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks