Overview

overview

10

Static

static

b387951ffa...cf.exe

windows7-x64

10

b387951ffa...cf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b387951ffa8adb9290f7eda8f235cf8798135543515a338fe2f66f124a5570cf

  • Size

    88KB

  • Sample

    221020-spknnsbaam

  • MD5

    9019b18f56583d57e0ba6a5d2a8eb3f6

  • SHA1

    5aceda13f3621303b5c3cec528d5f509cb350443

  • SHA256

    b387951ffa8adb9290f7eda8f235cf8798135543515a338fe2f66f124a5570cf

  • SHA512

    d018536b63f38d1b65f9f421844ab22b8b01b06518809ad7935009a276785e82fdf6d360947ae36e583c41e0ec96ff4f2dc4344e78de6db423f01578632b847d

  • SSDEEP

    1536:0mUv1An1woC0fyK2c/4jTT9eH10oeM5VVt1Pye5R9Le3bKkK2Qq13i6E:JUvOqo1aZz/9eH1aoy3bKy

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b387951ffa8adb9290f7eda8f235cf8798135543515a338fe2f66f124a5570cf

    • Size

      88KB

    • MD5

      9019b18f56583d57e0ba6a5d2a8eb3f6

    • SHA1

      5aceda13f3621303b5c3cec528d5f509cb350443

    • SHA256

      b387951ffa8adb9290f7eda8f235cf8798135543515a338fe2f66f124a5570cf

    • SHA512

      d018536b63f38d1b65f9f421844ab22b8b01b06518809ad7935009a276785e82fdf6d360947ae36e583c41e0ec96ff4f2dc4344e78de6db423f01578632b847d

    • SSDEEP

      1536:0mUv1An1woC0fyK2c/4jTT9eH10oeM5VVt1Pye5R9Le3bKkK2Qq13i6E:JUvOqo1aZz/9eH1aoy3bKy

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks