Overview

overview

10

Static

static

250dbd129d...37.exe

windows7-x64

10

250dbd129d...37.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    250dbd129dab69a7f0879826bd27832ff0ec6dce2ecb5b2fff6892ad9f5c6037

  • Size

    54KB

  • Sample

    221011-vnh5kafbdl

  • MD5

    4b89e7da946fe6e3a5a5fe7552d534c5

  • SHA1

    8fa34f466f813159341e7a1f911acf3e6e76afec

  • SHA256

    250dbd129dab69a7f0879826bd27832ff0ec6dce2ecb5b2fff6892ad9f5c6037

  • SHA512

    847a1732be5b273c43ca41b709d682ea8c79636dd6641e420fae9aa04fcae43cb1155c2c4adeadd68b5a65435e2701debfe5c47b253dff394cd4279b8152a0e5

  • SSDEEP

    768:TONEhmig80VHv+6wH9H7MfygXaDMFQXD7eKisKl4qR:TOamW056NNDsQXD7FisKldR

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      250dbd129dab69a7f0879826bd27832ff0ec6dce2ecb5b2fff6892ad9f5c6037

    • Size

      54KB

    • MD5

      4b89e7da946fe6e3a5a5fe7552d534c5

    • SHA1

      8fa34f466f813159341e7a1f911acf3e6e76afec

    • SHA256

      250dbd129dab69a7f0879826bd27832ff0ec6dce2ecb5b2fff6892ad9f5c6037

    • SHA512

      847a1732be5b273c43ca41b709d682ea8c79636dd6641e420fae9aa04fcae43cb1155c2c4adeadd68b5a65435e2701debfe5c47b253dff394cd4279b8152a0e5

    • SSDEEP

      768:TONEhmig80VHv+6wH9H7MfygXaDMFQXD7eKisKl4qR:TOamW056NNDsQXD7FisKldR

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks