Overview

overview

10

Static

static

bf6af62347...45.exe

windows7-x64

10

bf6af62347...45.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bf6af6234701a682e3d2725845809e92ce981c7f966724e0910d245c99f59d45

  • Size

    336KB

  • Sample

    221020-b6r1mshdbp

  • MD5

    803becdaceb5967fed1ba69c4b317300

  • SHA1

    bffc1a8ef34f54634d53aa4d5b85f805c14edc74

  • SHA256

    bf6af6234701a682e3d2725845809e92ce981c7f966724e0910d245c99f59d45

  • SHA512

    b593b71ff4888d079170153c6fd67b456084707fe37af09a89d7c2265fa4a86ca3335b7dd106b092eae2d30dfb3bbd188df80852f4b87c234cb9c0c504c363ef

  • SSDEEP

    3072:EpmPpBtQGCltUWrEpmpXzKmpXzR84nDVkj4C2lXRWMvaTv/0qAdf564HP4oQZiEl:E8PpYGCleWBpDC2dRITv/HAf5NxWvj

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      bf6af6234701a682e3d2725845809e92ce981c7f966724e0910d245c99f59d45

    • Size

      336KB

    • MD5

      803becdaceb5967fed1ba69c4b317300

    • SHA1

      bffc1a8ef34f54634d53aa4d5b85f805c14edc74

    • SHA256

      bf6af6234701a682e3d2725845809e92ce981c7f966724e0910d245c99f59d45

    • SHA512

      b593b71ff4888d079170153c6fd67b456084707fe37af09a89d7c2265fa4a86ca3335b7dd106b092eae2d30dfb3bbd188df80852f4b87c234cb9c0c504c363ef

    • SSDEEP

      3072:EpmPpBtQGCltUWrEpmpXzKmpXzR84nDVkj4C2lXRWMvaTv/0qAdf564HP4oQZiEl:E8PpYGCleWBpDC2dRITv/HAf5NxWvj

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks