Overview

overview

10

Static

static

80ac0b7670...11.exe

windows7-x64

10

80ac0b7670...11.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    80ac0b767053c32c11bea7e5a3e7f02c4464649da5e3c1a520bb57d69c26e011

  • Size

    212KB

  • Sample

    221020-2hnleshden

  • MD5

    7d43a68e766ff299dd6b5bace62efb20

  • SHA1

    73cc42a1789ace4d679201300afd1547e8279d71

  • SHA256

    80ac0b767053c32c11bea7e5a3e7f02c4464649da5e3c1a520bb57d69c26e011

  • SHA512

    88e18f93a1bd14aa4f83da3c104d5cfb28409dfb9cd9f96ae2fc146ea60e4c2c3280c00478200980d526e43b915938bf194fbf1ff4477ba52d8b4f4c100f0743

  • SSDEEP

    6144:0zrAQlUWF/B/XQSA5g9+plxVSzfuDkZHxUZgyagnZYsHmv+3sH3OU5GGE9EsWR1y:+kQHngnZYsGQ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      80ac0b767053c32c11bea7e5a3e7f02c4464649da5e3c1a520bb57d69c26e011

    • Size

      212KB

    • MD5

      7d43a68e766ff299dd6b5bace62efb20

    • SHA1

      73cc42a1789ace4d679201300afd1547e8279d71

    • SHA256

      80ac0b767053c32c11bea7e5a3e7f02c4464649da5e3c1a520bb57d69c26e011

    • SHA512

      88e18f93a1bd14aa4f83da3c104d5cfb28409dfb9cd9f96ae2fc146ea60e4c2c3280c00478200980d526e43b915938bf194fbf1ff4477ba52d8b4f4c100f0743

    • SSDEEP

      6144:0zrAQlUWF/B/XQSA5g9+plxVSzfuDkZHxUZgyagnZYsHmv+3sH3OU5GGE9EsWR1y:+kQHngnZYsGQ

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks