Overview

overview

10

Static

static

12adadf7f5...e7.exe

windows7-x64

10

12adadf7f5...e7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    12adadf7f5f55db36c66a06e172d81b47e98f2af688aa147803352e9820b53e7

  • Size

    111KB

  • Sample

    221011-zr243aebf9

  • MD5

    791459e30762364bb524c74131c6ee00

  • SHA1

    141d82caed16f2458cd0372c7764e8d74e05830e

  • SHA256

    12adadf7f5f55db36c66a06e172d81b47e98f2af688aa147803352e9820b53e7

  • SHA512

    f0283940fd1e162a4431a936839e10e3ed5559f8b9a45d798da660933633e64a2e5fb50b43420ccd5878be9d22179d7e10b5f260b7ea74dd4e97fff8ff0bdead

  • SSDEEP

    3072:91K3n2dXcBf9p4D4dMz4n4N4t4R4aEIIIIzl:91K3nJBf9xMdEIIIIz

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      12adadf7f5f55db36c66a06e172d81b47e98f2af688aa147803352e9820b53e7

    • Size

      111KB

    • MD5

      791459e30762364bb524c74131c6ee00

    • SHA1

      141d82caed16f2458cd0372c7764e8d74e05830e

    • SHA256

      12adadf7f5f55db36c66a06e172d81b47e98f2af688aa147803352e9820b53e7

    • SHA512

      f0283940fd1e162a4431a936839e10e3ed5559f8b9a45d798da660933633e64a2e5fb50b43420ccd5878be9d22179d7e10b5f260b7ea74dd4e97fff8ff0bdead

    • SSDEEP

      3072:91K3n2dXcBf9p4D4dMz4n4N4t4R4aEIIIIzl:91K3nJBf9xMdEIIIIz

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks