Overview

overview

10

Static

static

2cc944bab5...aa.exe

windows7-x64

10

2cc944bab5...aa.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2cc944bab5065eee1a3ff38f91d9d1c9c0243a3cb5dadd830098611953e593aa

  • Size

    136KB

  • Sample

    221020-2gtfaahee5

  • MD5

    76b7f68596a04fef0b82058b29699df0

  • SHA1

    6d796db2c7625894a87e51dc2a3d58e7074335bc

  • SHA256

    2cc944bab5065eee1a3ff38f91d9d1c9c0243a3cb5dadd830098611953e593aa

  • SHA512

    f853d1244087253dea62edb734f5645858a8407473c6c179cdd390f4b78bca41329ed342e18a2a6bc7603204eedba48381bd40c1d6b6586ebb38eea269736a6a

  • SSDEEP

    3072:6kOGUEUbaxvN3wSUh2XZDutcHdVmn8+3o7:6kOGUcI3qdVy8+Y7

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2cc944bab5065eee1a3ff38f91d9d1c9c0243a3cb5dadd830098611953e593aa

    • Size

      136KB

    • MD5

      76b7f68596a04fef0b82058b29699df0

    • SHA1

      6d796db2c7625894a87e51dc2a3d58e7074335bc

    • SHA256

      2cc944bab5065eee1a3ff38f91d9d1c9c0243a3cb5dadd830098611953e593aa

    • SHA512

      f853d1244087253dea62edb734f5645858a8407473c6c179cdd390f4b78bca41329ed342e18a2a6bc7603204eedba48381bd40c1d6b6586ebb38eea269736a6a

    • SSDEEP

      3072:6kOGUEUbaxvN3wSUh2XZDutcHdVmn8+3o7:6kOGUcI3qdVy8+Y7

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks