Overview

overview

10

Static

static

8e08523225...6c.exe

windows7-x64

10

8e08523225...6c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e08523225ae97b77799f06b441561853acb4e19300b6639ebab83bb6f1df56c

  • Size

    88KB

  • Sample

    221014-mfjgcsbahk

  • MD5

    6bcd1f8839c700765331f9cadba8e367

  • SHA1

    6be31edffe0ca82c82ea129fb304b19da2fb5856

  • SHA256

    8e08523225ae97b77799f06b441561853acb4e19300b6639ebab83bb6f1df56c

  • SHA512

    aeaf1c7bf853fa574bcae57695fa025637a175a15cc882fd8ba3175ed2eb03ad6701b02130181c0322f75911d17db6a243ef7b82915dc91ebde191fdfba0bdb9

  • SSDEEP

    1536:7guvsgCqG84caEz0+nCsNAhz74yWzVaAgGV4VE:TsV84vz74yOsAgG

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      8e08523225ae97b77799f06b441561853acb4e19300b6639ebab83bb6f1df56c

    • Size

      88KB

    • MD5

      6bcd1f8839c700765331f9cadba8e367

    • SHA1

      6be31edffe0ca82c82ea129fb304b19da2fb5856

    • SHA256

      8e08523225ae97b77799f06b441561853acb4e19300b6639ebab83bb6f1df56c

    • SHA512

      aeaf1c7bf853fa574bcae57695fa025637a175a15cc882fd8ba3175ed2eb03ad6701b02130181c0322f75911d17db6a243ef7b82915dc91ebde191fdfba0bdb9

    • SSDEEP

      1536:7guvsgCqG84caEz0+nCsNAhz74yWzVaAgGV4VE:TsV84vz74yOsAgG

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks