Overview

overview

10

Static

static

88e8bc6432...6f.exe

windows7-x64

10

88e8bc6432...6f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    88e8bc64321f5cd8208bd3cd01ed2f9a807a871f64574cc35cdf661adf69816f

  • Size

    100KB

  • Sample

    221019-yrgyfsfaer

  • MD5

    6a4a03b843a09fafc03f04ee9292273a

  • SHA1

    c5759df5bac9125c370bc1ffa83d2478dfd9fa24

  • SHA256

    88e8bc64321f5cd8208bd3cd01ed2f9a807a871f64574cc35cdf661adf69816f

  • SHA512

    f5757a440f50de650a534051c7af9059c261b4f699dfd4ccb1ac6c24357a21cb94a2044d9180ce093453bc3f83a3296df0fbcba147b05d079dc4f8dfac509fab

  • SSDEEP

    1536:/fIcX2203QaxJcIRGWcOWPWvXArnY1ZPBizyes5NIjnZO1:gQiNJizyeuCn41

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      88e8bc64321f5cd8208bd3cd01ed2f9a807a871f64574cc35cdf661adf69816f

    • Size

      100KB

    • MD5

      6a4a03b843a09fafc03f04ee9292273a

    • SHA1

      c5759df5bac9125c370bc1ffa83d2478dfd9fa24

    • SHA256

      88e8bc64321f5cd8208bd3cd01ed2f9a807a871f64574cc35cdf661adf69816f

    • SHA512

      f5757a440f50de650a534051c7af9059c261b4f699dfd4ccb1ac6c24357a21cb94a2044d9180ce093453bc3f83a3296df0fbcba147b05d079dc4f8dfac509fab

    • SSDEEP

      1536:/fIcX2203QaxJcIRGWcOWPWvXArnY1ZPBizyes5NIjnZO1:gQiNJizyeuCn41

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks