Overview

overview

10

Static

static

adb0b50679...51.exe

windows7-x64

10

adb0b50679...51.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    adb0b50679b208dcc07d5a65af49a8827bf1628e1a272447ebc816a3ce71ce51

  • Size

    88KB

  • Sample

    221011-ysjtfacbe4

  • MD5

    5af8319e2973bb3fd29671c0f310745c

  • SHA1

    9da0541ccc330a892fef64112f7a0d8cadeb1b6f

  • SHA256

    adb0b50679b208dcc07d5a65af49a8827bf1628e1a272447ebc816a3ce71ce51

  • SHA512

    9e5cb144714b472c5e7142c69913278a0cb6ddf949513db417ccff148774100d4252ddeec820943a2cc4f358df12bd012d5b1a95345e76cfa3133ad4f6b97ce8

  • SSDEEP

    1536:qikUHIQ/JDHKa5LJW6/Z2NZQKvdmNmS/:N1HI8DHKuFOJvdN

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      adb0b50679b208dcc07d5a65af49a8827bf1628e1a272447ebc816a3ce71ce51

    • Size

      88KB

    • MD5

      5af8319e2973bb3fd29671c0f310745c

    • SHA1

      9da0541ccc330a892fef64112f7a0d8cadeb1b6f

    • SHA256

      adb0b50679b208dcc07d5a65af49a8827bf1628e1a272447ebc816a3ce71ce51

    • SHA512

      9e5cb144714b472c5e7142c69913278a0cb6ddf949513db417ccff148774100d4252ddeec820943a2cc4f358df12bd012d5b1a95345e76cfa3133ad4f6b97ce8

    • SSDEEP

      1536:qikUHIQ/JDHKa5LJW6/Z2NZQKvdmNmS/:N1HI8DHKuFOJvdN

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks