Overview

overview

10

Static

static

d5b798ad8f...11.exe

windows7-x64

10

d5b798ad8f...11.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d5b798ad8f61e7c43cd68b3fc7d9819fddb81933ce8fb3db664a1ec4579cba11

  • Size

    248KB

  • Sample

    221020-b96cfahefj

  • MD5

    46e5386be27c91658cdac9f7ed49a365

  • SHA1

    5b0638a695e26e44bb7ec7095365af93441ea680

  • SHA256

    d5b798ad8f61e7c43cd68b3fc7d9819fddb81933ce8fb3db664a1ec4579cba11

  • SHA512

    296ce6f9de56d5ca0b9a9a64d6ac268a0271c4e62c56918929f516f8cf1a8b7bb88e63f6921d8b4898054f86bd3b752178fcd2d75590e910865d46ac09611cf0

  • SSDEEP

    6144:pDM5CElofkFWQPtnRneqAKnvmb7/D269fgwMty0e6ndv0Dj:pI5CLkFfnRnWKnvmb7/D26qndv0Dj

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d5b798ad8f61e7c43cd68b3fc7d9819fddb81933ce8fb3db664a1ec4579cba11

    • Size

      248KB

    • MD5

      46e5386be27c91658cdac9f7ed49a365

    • SHA1

      5b0638a695e26e44bb7ec7095365af93441ea680

    • SHA256

      d5b798ad8f61e7c43cd68b3fc7d9819fddb81933ce8fb3db664a1ec4579cba11

    • SHA512

      296ce6f9de56d5ca0b9a9a64d6ac268a0271c4e62c56918929f516f8cf1a8b7bb88e63f6921d8b4898054f86bd3b752178fcd2d75590e910865d46ac09611cf0

    • SSDEEP

      6144:pDM5CElofkFWQPtnRneqAKnvmb7/D269fgwMty0e6ndv0Dj:pI5CLkFfnRnWKnvmb7/D26qndv0Dj

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks