Overview

overview

10

Static

static

1e4f75cfce...06.exe

windows7-x64

10

1e4f75cfce...06.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1e4f75cfcef77d0df6da0427649af40f19ded23044af80113c59746283475306

  • Size

    88KB

  • Sample

    221020-13w8maggc4

  • MD5

    40e359cc1a7a12f607856e59bee59510

  • SHA1

    086f7f1611c94878e546160bb54c4dd22f8080a4

  • SHA256

    1e4f75cfcef77d0df6da0427649af40f19ded23044af80113c59746283475306

  • SHA512

    41c23d42dbbc20dc4f4643cdf691b81e020cad5c28ca97f2eb0ade470d448522bfbf3166046d06eb929235ec5e07bb53f621f004cf3da656ea381ff70426db4b

  • SSDEEP

    768:SEb6o58+nURLQ/JD60XDeVtA5YxmHwWW2iYf/ce2NZQcyfbdg5CIBT/DCwaTDNmx:S+8+IQ/JDHKa5LJW6/Z2NZQCvDmNmopA

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1e4f75cfcef77d0df6da0427649af40f19ded23044af80113c59746283475306

    • Size

      88KB

    • MD5

      40e359cc1a7a12f607856e59bee59510

    • SHA1

      086f7f1611c94878e546160bb54c4dd22f8080a4

    • SHA256

      1e4f75cfcef77d0df6da0427649af40f19ded23044af80113c59746283475306

    • SHA512

      41c23d42dbbc20dc4f4643cdf691b81e020cad5c28ca97f2eb0ade470d448522bfbf3166046d06eb929235ec5e07bb53f621f004cf3da656ea381ff70426db4b

    • SSDEEP

      768:SEb6o58+nURLQ/JD60XDeVtA5YxmHwWW2iYf/ce2NZQcyfbdg5CIBT/DCwaTDNmx:S+8+IQ/JDHKa5LJW6/Z2NZQCvDmNmopA

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks