Overview

overview

10

Static

static

84a1edb12b...2c.exe

windows7-x64

10

84a1edb12b...2c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    84a1edb12bbf355e926ed12dfaa4559001b4f607f4b1e8824fd05a99ae63fc2c

  • Size

    232KB

  • Sample

    221011-zcjn6sdcc9

  • MD5

    615324abb2df98e56cea859f8f5322b0

  • SHA1

    2c3cad9b94c9a87d2ff4a2db72d2fc9811eb471b

  • SHA256

    84a1edb12bbf355e926ed12dfaa4559001b4f607f4b1e8824fd05a99ae63fc2c

  • SHA512

    233d0494afbf918f64e82633a9db3412ce09e49845b830239d66681c37aec93aeb2e12b9ca97c3023fc0ab23373c646e2e77dc165934bac9f1138d7087430e6d

  • SSDEEP

    6144:kVcglYphADylVl85IwwiXeujvWBxD2dMp/FFc8pZf4:+cPphADylVl85IwwiXeujvWBxD2dO/FY

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      84a1edb12bbf355e926ed12dfaa4559001b4f607f4b1e8824fd05a99ae63fc2c

    • Size

      232KB

    • MD5

      615324abb2df98e56cea859f8f5322b0

    • SHA1

      2c3cad9b94c9a87d2ff4a2db72d2fc9811eb471b

    • SHA256

      84a1edb12bbf355e926ed12dfaa4559001b4f607f4b1e8824fd05a99ae63fc2c

    • SHA512

      233d0494afbf918f64e82633a9db3412ce09e49845b830239d66681c37aec93aeb2e12b9ca97c3023fc0ab23373c646e2e77dc165934bac9f1138d7087430e6d

    • SSDEEP

      6144:kVcglYphADylVl85IwwiXeujvWBxD2dMp/FFc8pZf4:+cPphADylVl85IwwiXeujvWBxD2dO/FY

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks