Overview

overview

10

Static

static

9bf6d52e04...a9.exe

windows7-x64

10

9bf6d52e04...a9.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9bf6d52e049c3667f7caf52143b98d12501c1edfb9bc005ccf994655fc4076a9

  • Size

    196KB

  • Sample

    221012-rdmhfsefdq

  • MD5

    6a3fb5491facf770911aad9dac3438b0

  • SHA1

    1a5e80973b24502d99e53d160940a5fe2df6918b

  • SHA256

    9bf6d52e049c3667f7caf52143b98d12501c1edfb9bc005ccf994655fc4076a9

  • SHA512

    16f1b57bf9eb0c7b41b30901bf58a87e8376482688f2607dd4d829064e38f22398fe130fb6f7d91b4303c65de8f6e870e9bc4575fe5ad8b0eecc1ac85c5bf42d

  • SSDEEP

    6144:VbeuUPH3bX2a23NYcJQ8TfxZ85WJ007G9tSBN7fZfp:ReuUPH3bX2a23NYcJQ8TfxZ9J0rtSzzD

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      9bf6d52e049c3667f7caf52143b98d12501c1edfb9bc005ccf994655fc4076a9

    • Size

      196KB

    • MD5

      6a3fb5491facf770911aad9dac3438b0

    • SHA1

      1a5e80973b24502d99e53d160940a5fe2df6918b

    • SHA256

      9bf6d52e049c3667f7caf52143b98d12501c1edfb9bc005ccf994655fc4076a9

    • SHA512

      16f1b57bf9eb0c7b41b30901bf58a87e8376482688f2607dd4d829064e38f22398fe130fb6f7d91b4303c65de8f6e870e9bc4575fe5ad8b0eecc1ac85c5bf42d

    • SSDEEP

      6144:VbeuUPH3bX2a23NYcJQ8TfxZ85WJ007G9tSBN7fZfp:ReuUPH3bX2a23NYcJQ8TfxZ9J0rtSzzD

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks