Overview

overview

10

Static

static

b564b68213...29.exe

windows7-x64

10

b564b68213...29.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b564b6821357a643a53a7fefa8bd728d194e9562834c75f1025f793970272c29

  • Size

    204KB

  • Sample

    221020-2mn3rahgg7

  • MD5

    597e420cad638744669b5c7f93931a77

  • SHA1

    8780d50fd6ee4aceb402235b1cfae3bf9237c04e

  • SHA256

    b564b6821357a643a53a7fefa8bd728d194e9562834c75f1025f793970272c29

  • SHA512

    3ae538bb5f1a4d52caeb3961cf85a3f35739ddcaaa75e065cfcfb5e5642e01320cc33a56006a3341ce1b5e9ee4178024aa134356cc574d0523305fd310a5c206

  • SSDEEP

    6144:ks2i/cZrSlO3OW80Nr0SkA6XLeLGvUjouMdD3l:ks2ccVSlW80N4SkA6yKUjouM13l

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b564b6821357a643a53a7fefa8bd728d194e9562834c75f1025f793970272c29

    • Size

      204KB

    • MD5

      597e420cad638744669b5c7f93931a77

    • SHA1

      8780d50fd6ee4aceb402235b1cfae3bf9237c04e

    • SHA256

      b564b6821357a643a53a7fefa8bd728d194e9562834c75f1025f793970272c29

    • SHA512

      3ae538bb5f1a4d52caeb3961cf85a3f35739ddcaaa75e065cfcfb5e5642e01320cc33a56006a3341ce1b5e9ee4178024aa134356cc574d0523305fd310a5c206

    • SSDEEP

      6144:ks2i/cZrSlO3OW80Nr0SkA6XLeLGvUjouMdD3l:ks2ccVSlW80N4SkA6yKUjouM13l

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks