Overview

overview

10

Static

static

5db4d70abe...ca.exe

windows7-x64

10

5db4d70abe...ca.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5db4d70abe5d0a9db9d33cc326f454ba9042a170a97d67eff7d65d6216ea30ca

  • Size

    240KB

  • Sample

    221020-l6y43ahaf4

  • MD5

    960f10fc899ced2e58048ec820eb3643

  • SHA1

    6abdbd6585f704071eb2ff3433ca8a38f629e42c

  • SHA256

    5db4d70abe5d0a9db9d33cc326f454ba9042a170a97d67eff7d65d6216ea30ca

  • SHA512

    de4291235f3367eeaf91fdfbb51dcc66006a860fbf998b9c0d40f82fcec33f7bc662c57d5c8e0e16afe4457a60f1b136c85566e83a4a7af61d241ef1df3a3ac8

  • SSDEEP

    6144:8Ua3dwqsNwemAB0EqxF6snji81RUinKchhy+S3k:AdQQJsZU

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      5db4d70abe5d0a9db9d33cc326f454ba9042a170a97d67eff7d65d6216ea30ca

    • Size

      240KB

    • MD5

      960f10fc899ced2e58048ec820eb3643

    • SHA1

      6abdbd6585f704071eb2ff3433ca8a38f629e42c

    • SHA256

      5db4d70abe5d0a9db9d33cc326f454ba9042a170a97d67eff7d65d6216ea30ca

    • SHA512

      de4291235f3367eeaf91fdfbb51dcc66006a860fbf998b9c0d40f82fcec33f7bc662c57d5c8e0e16afe4457a60f1b136c85566e83a4a7af61d241ef1df3a3ac8

    • SSDEEP

      6144:8Ua3dwqsNwemAB0EqxF6snji81RUinKchhy+S3k:AdQQJsZU

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks