Overview

overview

10

Static

static

1

88dee43e21...3e.exe

windows7-x64

10

88dee43e21...3e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    88dee43e2112b6c513b20b572654d80510baa6c043cbd764842e9f6d9f47843e

  • Size

    54KB

  • Sample

    221020-gsw1bsghe4

  • MD5

    80bfcbfc7cbf8924b09273336ecc138e

  • SHA1

    4983fa51aab70ed6ac3a83112a11413981e74e2f

  • SHA256

    88dee43e2112b6c513b20b572654d80510baa6c043cbd764842e9f6d9f47843e

  • SHA512

    d7040df08a6f849ea8c94e7a67e0310a7b17ccff4b9cb8f338c19b414ec2cb4c6b0948b20d29fb5a3c9ec2bc3dcf2abbc7b3611ecdb875672419957e13542c8a

  • SSDEEP

    768:Oe3PFaDVyOQgljLDKRJyM3BmsHzSB4us/wJJapg4RoSMZeUZB/7pZjEcoy/v/KxP:V3cpyORJLuB4P4AJJv4Romu/1BybS+Z

Score
10/10
evasion

Malware Config

Targets

    • Target

      88dee43e2112b6c513b20b572654d80510baa6c043cbd764842e9f6d9f47843e

    • Size

      54KB

    • MD5

      80bfcbfc7cbf8924b09273336ecc138e

    • SHA1

      4983fa51aab70ed6ac3a83112a11413981e74e2f

    • SHA256

      88dee43e2112b6c513b20b572654d80510baa6c043cbd764842e9f6d9f47843e

    • SHA512

      d7040df08a6f849ea8c94e7a67e0310a7b17ccff4b9cb8f338c19b414ec2cb4c6b0948b20d29fb5a3c9ec2bc3dcf2abbc7b3611ecdb875672419957e13542c8a

    • SSDEEP

      768:Oe3PFaDVyOQgljLDKRJyM3BmsHzSB4us/wJJapg4RoSMZeUZB/7pZjEcoy/v/KxP:V3cpyORJLuB4P4AJJv4Romu/1BybS+Z

    Score
    10/10
    evasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks