Overview

overview

10

Static

static

4965c7df73...4e.exe

windows7-x64

10

4965c7df73...4e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4965c7df73f9489541ac4345a28f05af230eb83f54096d06e47919dd1613b44e

  • Size

    212KB

  • Sample

    221020-l7fn4sghej

  • MD5

    a05e6933593bd46a711442cfe7766190

  • SHA1

    d8393b5921939f0d771599be5f96cfb2f560951c

  • SHA256

    4965c7df73f9489541ac4345a28f05af230eb83f54096d06e47919dd1613b44e

  • SHA512

    04d2f68cb37d010ad81e16dda725016a3a5bf2b0ea48a5d1abea41005a8f405ef24c983631fb9b180d3161c2750b65e067c3756ff25a776fa0d2a7b4cd6a5bb7

  • SSDEEP

    6144:t8nFDwylN5WnXLd2wkM9VE0U68KVl1gYI7Z:inFDw65WnXLd2wkM9VE0U68KVl1gYQ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      4965c7df73f9489541ac4345a28f05af230eb83f54096d06e47919dd1613b44e

    • Size

      212KB

    • MD5

      a05e6933593bd46a711442cfe7766190

    • SHA1

      d8393b5921939f0d771599be5f96cfb2f560951c

    • SHA256

      4965c7df73f9489541ac4345a28f05af230eb83f54096d06e47919dd1613b44e

    • SHA512

      04d2f68cb37d010ad81e16dda725016a3a5bf2b0ea48a5d1abea41005a8f405ef24c983631fb9b180d3161c2750b65e067c3756ff25a776fa0d2a7b4cd6a5bb7

    • SSDEEP

      6144:t8nFDwylN5WnXLd2wkM9VE0U68KVl1gYI7Z:inFDw65WnXLd2wkM9VE0U68KVl1gYQ

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks