Overview

overview

10

Static

static

0faac8a28d...51.exe

windows7-x64

10

0faac8a28d...51.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0faac8a28d9e254377d849c7f254f3a085c2d021895007166a05b68a085f9551

  • Size

    164KB

  • Sample

    221020-b5wmfahbg7

  • MD5

    77c510c3b2debe261afbf3399e94b83d

  • SHA1

    843e511109ab2cad7bee6401c2ebf4a1490523ae

  • SHA256

    0faac8a28d9e254377d849c7f254f3a085c2d021895007166a05b68a085f9551

  • SHA512

    dc43be4f6ab97758614407ab40bb12118f4ccfde01961fdb54a5251b150c894135124d79b848cb1242528b37d1a184befa0be0d84547fd2ff14222875b76f31a

  • SSDEEP

    1536:q5SwdqgJ7zGYo93wKABCIvhZ9C9eO4F+NPouHj6Koa6Epm0SS+F8OJ6t+:QSwdqmGYm3/t6jaUS+

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0faac8a28d9e254377d849c7f254f3a085c2d021895007166a05b68a085f9551

    • Size

      164KB

    • MD5

      77c510c3b2debe261afbf3399e94b83d

    • SHA1

      843e511109ab2cad7bee6401c2ebf4a1490523ae

    • SHA256

      0faac8a28d9e254377d849c7f254f3a085c2d021895007166a05b68a085f9551

    • SHA512

      dc43be4f6ab97758614407ab40bb12118f4ccfde01961fdb54a5251b150c894135124d79b848cb1242528b37d1a184befa0be0d84547fd2ff14222875b76f31a

    • SSDEEP

      1536:q5SwdqgJ7zGYo93wKABCIvhZ9C9eO4F+NPouHj6Koa6Epm0SS+F8OJ6t+:QSwdqmGYm3/t6jaUS+

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks