Overview

overview

10

Static

static

d7e8528e9c...f6.exe

windows7-x64

10

d7e8528e9c...f6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d7e8528e9ce53c2c8b5cdfcb79c2f92a7adb4919aa594c8299301e33dd72def6

  • Size

    284KB

  • Sample

    221020-bx2tgsggf6

  • MD5

    548b75cb7b45c91384c29f14fb3e54f7

  • SHA1

    c875d5ab683b7bd4ea4f7c2c5f2907a375123cdb

  • SHA256

    d7e8528e9ce53c2c8b5cdfcb79c2f92a7adb4919aa594c8299301e33dd72def6

  • SHA512

    6b69c8b251ec1e75ebc50ebd290c38a83e53440168a2787d6a2307ed07902c991c962bcce2699ee4de10d9e61db349b873d5ae8a61105a2a198263783489c765

  • SSDEEP

    6144:+i36QcxQRhNyKQ9ezwA2Rv4gnw+lJVomcEk9dk/FLGY+Kt/dPLsx02Gf6vIqGnuk:7KjVIrbQdnHcllaXYDoDM3fLUa

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d7e8528e9ce53c2c8b5cdfcb79c2f92a7adb4919aa594c8299301e33dd72def6

    • Size

      284KB

    • MD5

      548b75cb7b45c91384c29f14fb3e54f7

    • SHA1

      c875d5ab683b7bd4ea4f7c2c5f2907a375123cdb

    • SHA256

      d7e8528e9ce53c2c8b5cdfcb79c2f92a7adb4919aa594c8299301e33dd72def6

    • SHA512

      6b69c8b251ec1e75ebc50ebd290c38a83e53440168a2787d6a2307ed07902c991c962bcce2699ee4de10d9e61db349b873d5ae8a61105a2a198263783489c765

    • SSDEEP

      6144:+i36QcxQRhNyKQ9ezwA2Rv4gnw+lJVomcEk9dk/FLGY+Kt/dPLsx02Gf6vIqGnuk:7KjVIrbQdnHcllaXYDoDM3fLUa

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks