Overview

overview

10

Static

static

2d4be186ba...86.exe

windows7-x64

10

2d4be186ba...86.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2d4be186ba004c9042666f08f57dba395ebdc7d5c90ff9322a66a4c37e0bea86

  • Size

    272KB

  • Sample

    221020-b4vnrahccj

  • MD5

    818bf6a22e8a32a8c58aa29be87a4d70

  • SHA1

    eaa77d40db377c311601eba3afdfbd77d79469fc

  • SHA256

    2d4be186ba004c9042666f08f57dba395ebdc7d5c90ff9322a66a4c37e0bea86

  • SHA512

    62dd41c44535656310d8e668e725c4a94bbea6175536616afc8c474cd760a6df119ee042f4c74685ea6dff7c150714c4f51d137f3b721403e12f8bb6c94eecbb

  • SSDEEP

    3072:8DFe7C230FvbVJznCRck/hqF69MSs/PLLK+JmmU3YwgTgA3Pb:OodefznHk39G/PLLDU3YwgT

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2d4be186ba004c9042666f08f57dba395ebdc7d5c90ff9322a66a4c37e0bea86

    • Size

      272KB

    • MD5

      818bf6a22e8a32a8c58aa29be87a4d70

    • SHA1

      eaa77d40db377c311601eba3afdfbd77d79469fc

    • SHA256

      2d4be186ba004c9042666f08f57dba395ebdc7d5c90ff9322a66a4c37e0bea86

    • SHA512

      62dd41c44535656310d8e668e725c4a94bbea6175536616afc8c474cd760a6df119ee042f4c74685ea6dff7c150714c4f51d137f3b721403e12f8bb6c94eecbb

    • SSDEEP

      3072:8DFe7C230FvbVJznCRck/hqF69MSs/PLLK+JmmU3YwgTgA3Pb:OodefznHk39G/PLLDU3YwgT

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks