Overview

overview

10

Static

static

2ae9ae84ed...ef.exe

windows7-x64

10

2ae9ae84ed...ef.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2ae9ae84ed3e2dc0f3c994712d5af27f07e93498930c898a6d29814b5e8cd1ef

  • Size

    176KB

  • Sample

    221011-y54z5sdaek

  • MD5

    6a6404197b4c2906d33a6dad3c037470

  • SHA1

    0ed1da9cb5c8b2898ce0c8154ca40cf82d818b0c

  • SHA256

    2ae9ae84ed3e2dc0f3c994712d5af27f07e93498930c898a6d29814b5e8cd1ef

  • SHA512

    a38e4892d294ff785aab794742abded068aab401f32731b4daf4b48aa8177530c940d803b40a0df6cfd9545ea42bd762cacba44f6cc1e258d3e1315c9b256b0e

  • SSDEEP

    3072:aSlRcro1XasDzBQo1MHksqqXIVFSQrl1jPjtIojPjPjPjPjPjfcabuxfI:DaOCH9qqXwr7l77777Eabu

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2ae9ae84ed3e2dc0f3c994712d5af27f07e93498930c898a6d29814b5e8cd1ef

    • Size

      176KB

    • MD5

      6a6404197b4c2906d33a6dad3c037470

    • SHA1

      0ed1da9cb5c8b2898ce0c8154ca40cf82d818b0c

    • SHA256

      2ae9ae84ed3e2dc0f3c994712d5af27f07e93498930c898a6d29814b5e8cd1ef

    • SHA512

      a38e4892d294ff785aab794742abded068aab401f32731b4daf4b48aa8177530c940d803b40a0df6cfd9545ea42bd762cacba44f6cc1e258d3e1315c9b256b0e

    • SSDEEP

      3072:aSlRcro1XasDzBQo1MHksqqXIVFSQrl1jPjtIojPjPjPjPjPjfcabuxfI:DaOCH9qqXwr7l77777Eabu

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks