Overview

overview

8

Static

static

16184cfc81...94.exe

windows7-x64

8

16184cfc81...94.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    16184cfc811eb61c798d7012a7445421514cc221c866f315a1bfe0e329a67a94

  • Size

    26KB

  • Sample

    221014-l7npqaafd7

  • MD5

    6f1f2f6afe684ef8a3e2a0e0057b1371

  • SHA1

    09a66afa369be6b69fc859f3938089ee40c0ecfc

  • SHA256

    16184cfc811eb61c798d7012a7445421514cc221c866f315a1bfe0e329a67a94

  • SHA512

    ad5f21ba1d7a87df715ba7efcde7805db2713a019374485637a6d25d493a33a2fe7360443a19f0bd03743a41b3e72783d9a92c48509cc7ed9b13b6b9298f6b16

  • SSDEEP

    384:ViN9ccVj9rt0GUnFnRnxud5SseO/N2W8HXVEu59uLS5U/ANpp4DhUEez/hKKaN/J:ViZj9OnRnmSs1d8HXVEu5TWixIF/vOa

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      16184cfc811eb61c798d7012a7445421514cc221c866f315a1bfe0e329a67a94

    • Size

      26KB

    • MD5

      6f1f2f6afe684ef8a3e2a0e0057b1371

    • SHA1

      09a66afa369be6b69fc859f3938089ee40c0ecfc

    • SHA256

      16184cfc811eb61c798d7012a7445421514cc221c866f315a1bfe0e329a67a94

    • SHA512

      ad5f21ba1d7a87df715ba7efcde7805db2713a019374485637a6d25d493a33a2fe7360443a19f0bd03743a41b3e72783d9a92c48509cc7ed9b13b6b9298f6b16

    • SSDEEP

      384:ViN9ccVj9rt0GUnFnRnxud5SseO/N2W8HXVEu59uLS5U/ANpp4DhUEez/hKKaN/J:ViZj9OnRnmSs1d8HXVEu5TWixIF/vOa

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks