Overview

overview

10

Static

static

13b07f7be0...db.exe

windows7-x64

10

13b07f7be0...db.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    13b07f7be0564f1627f071e31dab90b9973d03668e50389e1e3ab5f61438cedb

  • Size

    128KB

  • Sample

    221011-lqa3asgfa3

  • MD5

    61326ca3afacdb98a4ed8066145af326

  • SHA1

    7bd671d5d13c994672e7281093617e89cdbc58a8

  • SHA256

    13b07f7be0564f1627f071e31dab90b9973d03668e50389e1e3ab5f61438cedb

  • SHA512

    03038c743329b787034f0a27338bc0a33b6a619e6a66c9fbdec49b38a92f80a194bda92690ec3aa5e76809dcdbea1dc5816be31bba686ccc301e44c01ef4ec1a

  • SSDEEP

    1536:+8k8uBI8OTta097n9zN99Flc4IE3IezPoVTTqtFhUpHnkHUS65BciumHnXtk:Fk8uNOTs0BZN9HWAotqbvBmHS

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      13b07f7be0564f1627f071e31dab90b9973d03668e50389e1e3ab5f61438cedb

    • Size

      128KB

    • MD5

      61326ca3afacdb98a4ed8066145af326

    • SHA1

      7bd671d5d13c994672e7281093617e89cdbc58a8

    • SHA256

      13b07f7be0564f1627f071e31dab90b9973d03668e50389e1e3ab5f61438cedb

    • SHA512

      03038c743329b787034f0a27338bc0a33b6a619e6a66c9fbdec49b38a92f80a194bda92690ec3aa5e76809dcdbea1dc5816be31bba686ccc301e44c01ef4ec1a

    • SSDEEP

      1536:+8k8uBI8OTta097n9zN99Flc4IE3IezPoVTTqtFhUpHnkHUS65BciumHnXtk:Fk8uNOTs0BZN9HWAotqbvBmHS

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks