Overview

overview

10

Static

static

5a1ff15b76...39.exe

windows7-x64

10

5a1ff15b76...39.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5a1ff15b76db7d10433477708d953e7095a6978edc0ab03d9189cf13c7942039

  • Size

    108KB

  • Sample

    221020-l619eshaf7

  • MD5

    9628e01210889747963d98ca6dd95eb0

  • SHA1

    016778831c2dedc533d77bddc36b4a776e79d7f2

  • SHA256

    5a1ff15b76db7d10433477708d953e7095a6978edc0ab03d9189cf13c7942039

  • SHA512

    4371b51a57494dfb9c57f68db102275f2ce9d39e0d90fade5854e2d333b5e24947a0c9a003883cb7e968d5324fabae698994eeed4087b7cd068689a39609bae2

  • SSDEEP

    1536:MDNEKiB6oQ7Lh5+sXmNt0ttJPXLq0zTrkC:6NEmoIeZt0XTzToC

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      5a1ff15b76db7d10433477708d953e7095a6978edc0ab03d9189cf13c7942039

    • Size

      108KB

    • MD5

      9628e01210889747963d98ca6dd95eb0

    • SHA1

      016778831c2dedc533d77bddc36b4a776e79d7f2

    • SHA256

      5a1ff15b76db7d10433477708d953e7095a6978edc0ab03d9189cf13c7942039

    • SHA512

      4371b51a57494dfb9c57f68db102275f2ce9d39e0d90fade5854e2d333b5e24947a0c9a003883cb7e968d5324fabae698994eeed4087b7cd068689a39609bae2

    • SSDEEP

      1536:MDNEKiB6oQ7Lh5+sXmNt0ttJPXLq0zTrkC:6NEmoIeZt0XTzToC

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks