Overview

overview

10

Static

static

f365196734...48.exe

windows7-x64

10

f365196734...48.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f3651967349968672fb16a02d8a07fcf1320235d720f581d2aab6d09514b5848

  • Size

    224KB

  • Sample

    221020-2naxhshfem

  • MD5

    414af8e7b880bef1fe8851211a452220

  • SHA1

    70e6be6a2726e9229488c5350cc1f8409cd56395

  • SHA256

    f3651967349968672fb16a02d8a07fcf1320235d720f581d2aab6d09514b5848

  • SHA512

    b456603b67b495a10e69249e1e0e12f21ce9f41cef9fbf5ad62627daafab3f98a11011645bd88484d16e42e7464cce3435c0818443f38ea65ee40a89e47b7a77

  • SSDEEP

    3072:Z5IIRIsIqrgl4iEzjKTF40qVA0KNBx9lDy:Z5IoxIqrgCHpXA0KZ9w

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      f3651967349968672fb16a02d8a07fcf1320235d720f581d2aab6d09514b5848

    • Size

      224KB

    • MD5

      414af8e7b880bef1fe8851211a452220

    • SHA1

      70e6be6a2726e9229488c5350cc1f8409cd56395

    • SHA256

      f3651967349968672fb16a02d8a07fcf1320235d720f581d2aab6d09514b5848

    • SHA512

      b456603b67b495a10e69249e1e0e12f21ce9f41cef9fbf5ad62627daafab3f98a11011645bd88484d16e42e7464cce3435c0818443f38ea65ee40a89e47b7a77

    • SSDEEP

      3072:Z5IIRIsIqrgl4iEzjKTF40qVA0KNBx9lDy:Z5IoxIqrgCHpXA0KZ9w

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks