Overview

overview

10

Static

static

de5bb136e2...42.exe

windows7-x64

10

de5bb136e2...42.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    de5bb136e2c6dafc5de85b7b51a0524647385c8abec9c0cd6790a7684cc05942

  • Size

    120KB

  • Sample

    221017-18385adfer

  • MD5

    06d57367caf54da00ded3938bbec87ab

  • SHA1

    19e9d411b0142c72ba235dd7b33ba5245b704843

  • SHA256

    de5bb136e2c6dafc5de85b7b51a0524647385c8abec9c0cd6790a7684cc05942

  • SHA512

    820cfaf50249b2d3a22a3f3a4508deb464117dd7825bbcc5edaed7bd1f6403ddb98e4366ef228c38ec29983c5c3a62c4c75edd2e6f8aab361815968b6d8fd030

  • SSDEEP

    1536:tGGocZXUZ10EmoiHl7gRNq27ddDhJmRjfFp6jhQh8bA0zb69ZeqpZj2jMhuysesw:tGK6HmvFKnAjfFQLA0zbPq36jRNEH

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      de5bb136e2c6dafc5de85b7b51a0524647385c8abec9c0cd6790a7684cc05942

    • Size

      120KB

    • MD5

      06d57367caf54da00ded3938bbec87ab

    • SHA1

      19e9d411b0142c72ba235dd7b33ba5245b704843

    • SHA256

      de5bb136e2c6dafc5de85b7b51a0524647385c8abec9c0cd6790a7684cc05942

    • SHA512

      820cfaf50249b2d3a22a3f3a4508deb464117dd7825bbcc5edaed7bd1f6403ddb98e4366ef228c38ec29983c5c3a62c4c75edd2e6f8aab361815968b6d8fd030

    • SSDEEP

      1536:tGGocZXUZ10EmoiHl7gRNq27ddDhJmRjfFp6jhQh8bA0zb69ZeqpZj2jMhuysesw:tGK6HmvFKnAjfFQLA0zbPq36jRNEH

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks