Overview

overview

10

Static

static

6cb7123507...22.exe

windows7-x64

10

6cb7123507...22.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6cb712350726cfb4348581f3f53af94528269ee3e302b12d69f99b3d74049822

  • Size

    212KB

  • Sample

    221019-p6wwgsgeh7

  • MD5

    a0eab4cd37944721bb7f62ade5358a08

  • SHA1

    7622fa7d2f081a0cd9e85c1c921f30b8383664a8

  • SHA256

    6cb712350726cfb4348581f3f53af94528269ee3e302b12d69f99b3d74049822

  • SHA512

    7be177b100f9d9de3e0f9e958e24fe89cb97777fe949ae50989155e0c394d93aab5bf82c2d442766d788579538fa38a8cd703a71b6a9cb6445fc2123b1b2bb4d

  • SSDEEP

    6144:2PFFwlPjiAzY09umHh7K5cUXEBwrYVHhAgz6Vcu:YFaxjhY09umH45cUXEBwUVHhAgz6Vx

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      6cb712350726cfb4348581f3f53af94528269ee3e302b12d69f99b3d74049822

    • Size

      212KB

    • MD5

      a0eab4cd37944721bb7f62ade5358a08

    • SHA1

      7622fa7d2f081a0cd9e85c1c921f30b8383664a8

    • SHA256

      6cb712350726cfb4348581f3f53af94528269ee3e302b12d69f99b3d74049822

    • SHA512

      7be177b100f9d9de3e0f9e958e24fe89cb97777fe949ae50989155e0c394d93aab5bf82c2d442766d788579538fa38a8cd703a71b6a9cb6445fc2123b1b2bb4d

    • SSDEEP

      6144:2PFFwlPjiAzY09umHh7K5cUXEBwrYVHhAgz6Vcu:YFaxjhY09umH45cUXEBwUVHhAgz6Vx

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks