Overview

overview

10

Static

static

dd5cb7fd7b...b7.exe

windows7-x64

10

dd5cb7fd7b...b7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dd5cb7fd7b619175146d3fef83603b4128073aa5fc8f16ed760ddf58c22efdb7

  • Size

    160KB

  • Sample

    221011-ywa1pscear

  • MD5

    78b33c8d8014ad769cd493bf7d1b0c80

  • SHA1

    47c8f94769679af766fcfb8a73faabbdb98aeb69

  • SHA256

    dd5cb7fd7b619175146d3fef83603b4128073aa5fc8f16ed760ddf58c22efdb7

  • SHA512

    db40fccc4eaf207cd763f903e7efdd1cd52aff8b60e5e8845ee4a26a1495c9d42a2ff53578316c19d20add529c8c19d98c5f4e4fe96345c2e31d260f078f0e32

  • SSDEEP

    1536:+GW3vSI3wcar+2oAeiCX6tEG7a9GjBGnYmy1DZeKyg:kShr+3qCXKgGjonBy1mg

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      dd5cb7fd7b619175146d3fef83603b4128073aa5fc8f16ed760ddf58c22efdb7

    • Size

      160KB

    • MD5

      78b33c8d8014ad769cd493bf7d1b0c80

    • SHA1

      47c8f94769679af766fcfb8a73faabbdb98aeb69

    • SHA256

      dd5cb7fd7b619175146d3fef83603b4128073aa5fc8f16ed760ddf58c22efdb7

    • SHA512

      db40fccc4eaf207cd763f903e7efdd1cd52aff8b60e5e8845ee4a26a1495c9d42a2ff53578316c19d20add529c8c19d98c5f4e4fe96345c2e31d260f078f0e32

    • SSDEEP

      1536:+GW3vSI3wcar+2oAeiCX6tEG7a9GjBGnYmy1DZeKyg:kShr+3qCXKgGjonBy1mg

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks