Overview

overview

10

Static

static

097f7e5d2b...d8.exe

windows7-x64

10

097f7e5d2b...d8.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    097f7e5d2b2fb5a083cede934fa989219e35d6120d189b35a355ce27b3736bd8

  • Size

    184KB

  • Sample

    221020-2dz4nahbhj

  • MD5

    5c1dd16ed45139d9da7f602a820ebac0

  • SHA1

    a4e36feb6febcdf1b06f83978c0be2cd9d06c02f

  • SHA256

    097f7e5d2b2fb5a083cede934fa989219e35d6120d189b35a355ce27b3736bd8

  • SHA512

    acfc14136e42b69fe8cde2624f8110a7222aae8a56fd5a7b357d6a23c525e7dd37e5cffa4a3b6e4482d62232a88111d8b8a2d0fbfb6f618a8ea9260512fd32bc

  • SSDEEP

    3072:DY2ZJm0WFa1YqldrXAHDnP8jmvZMy1Jy3b33akhGuSahvyMjy5cI8dZLsVaMz:BZE0WFa9Z0P8jmBry3L9nsVa4

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      097f7e5d2b2fb5a083cede934fa989219e35d6120d189b35a355ce27b3736bd8

    • Size

      184KB

    • MD5

      5c1dd16ed45139d9da7f602a820ebac0

    • SHA1

      a4e36feb6febcdf1b06f83978c0be2cd9d06c02f

    • SHA256

      097f7e5d2b2fb5a083cede934fa989219e35d6120d189b35a355ce27b3736bd8

    • SHA512

      acfc14136e42b69fe8cde2624f8110a7222aae8a56fd5a7b357d6a23c525e7dd37e5cffa4a3b6e4482d62232a88111d8b8a2d0fbfb6f618a8ea9260512fd32bc

    • SSDEEP

      3072:DY2ZJm0WFa1YqldrXAHDnP8jmvZMy1Jy3b33akhGuSahvyMjy5cI8dZLsVaMz:BZE0WFa9Z0P8jmBry3L9nsVa4

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks