Overview

overview

10

Static

static

2a9f4ec5eb...0f.exe

windows7-x64

10

2a9f4ec5eb...0f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2a9f4ec5eb42901b5b6e1571b1273a9c54d57040be20965cda33a7653f282d0f

  • Size

    84KB

  • Sample

    221019-rdlk6aahf7

  • MD5

    91cd2ac7e102172f64c048396f88a620

  • SHA1

    1b080d581c1a5a1a1923d8c2a1840b80a229a287

  • SHA256

    2a9f4ec5eb42901b5b6e1571b1273a9c54d57040be20965cda33a7653f282d0f

  • SHA512

    e043ba047925936248c1b440236c2810c04d8b2358f9bfe6cb9cb2330e4ca2619f6dd98011144de288330882f11615d33806567f956ef79f740a43c35ed83805

  • SSDEEP

    1536:IsodgNE16Lti8n42APNR2dcScLcPcxeTanuUHWOIs3xxNMq39gk34iSf:/54PNEdcScLcPcfnuo0X

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2a9f4ec5eb42901b5b6e1571b1273a9c54d57040be20965cda33a7653f282d0f

    • Size

      84KB

    • MD5

      91cd2ac7e102172f64c048396f88a620

    • SHA1

      1b080d581c1a5a1a1923d8c2a1840b80a229a287

    • SHA256

      2a9f4ec5eb42901b5b6e1571b1273a9c54d57040be20965cda33a7653f282d0f

    • SHA512

      e043ba047925936248c1b440236c2810c04d8b2358f9bfe6cb9cb2330e4ca2619f6dd98011144de288330882f11615d33806567f956ef79f740a43c35ed83805

    • SSDEEP

      1536:IsodgNE16Lti8n42APNR2dcScLcPcxeTanuUHWOIs3xxNMq39gk34iSf:/54PNEdcScLcPcfnuo0X

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks