Overview

overview

10

Static

static

0c9d69c42c...10.exe

windows7-x64

10

0c9d69c42c...10.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0c9d69c42c534fc77e197912dc7b88d9de77910e0801bc61d141cb9a815e3510

  • Size

    128KB

  • Sample

    221020-tecezsceg5

  • MD5

    80d59582c57d8d15a0e21d32efd94883

  • SHA1

    2fc940e5f34c361fa552ceec881f88c9aa073424

  • SHA256

    0c9d69c42c534fc77e197912dc7b88d9de77910e0801bc61d141cb9a815e3510

  • SHA512

    9b4563d4da399d0be48b0c65f8b98ec23e2ae1fbe9c34ef660051ae073b44c087bc30512e307384c1ada272fc215b5be294716c8fffd0acd9b368117a8cee130

  • SSDEEP

    3072:lijow2W0SzpLS3y4CpCfCGCCOCwC9CvCFCfCLCvCUCLC2FInROUSRSGSuSQSmSNQ:Ro0SdG3yGFInRO

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0c9d69c42c534fc77e197912dc7b88d9de77910e0801bc61d141cb9a815e3510

    • Size

      128KB

    • MD5

      80d59582c57d8d15a0e21d32efd94883

    • SHA1

      2fc940e5f34c361fa552ceec881f88c9aa073424

    • SHA256

      0c9d69c42c534fc77e197912dc7b88d9de77910e0801bc61d141cb9a815e3510

    • SHA512

      9b4563d4da399d0be48b0c65f8b98ec23e2ae1fbe9c34ef660051ae073b44c087bc30512e307384c1ada272fc215b5be294716c8fffd0acd9b368117a8cee130

    • SSDEEP

      3072:lijow2W0SzpLS3y4CpCfCGCCOCwC9CvCFCfCLCvCUCLC2FInROUSRSGSuSQSmSNQ:Ro0SdG3yGFInRO

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks