Overview

overview

10

Static

static

2748c7ec87...77.exe

windows7-x64

10

2748c7ec87...77.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2748c7ec87f6f07d928d4b9f656eae16bea8eaaa7b3130db8463f2b4505fcc77

  • Size

    236KB

  • Sample

    221021-c5gnysghbr

  • MD5

    7030492463c98f5aaa99b46e7378a76e

  • SHA1

    4cc2e1d33a966bd9f9fe46230abe1c6a81e29050

  • SHA256

    2748c7ec87f6f07d928d4b9f656eae16bea8eaaa7b3130db8463f2b4505fcc77

  • SHA512

    dcf105e0e2d39c9843b9e8489a7b080e2691326e1c62c6385a3379f999aa22e76a78fd9f7aa7bb61d65488c70e7de3af0a9ff4bc4a2d05ec84b2555202bb64a1

  • SSDEEP

    3072:bp9EkE7N5KCa6QQLAK2hcPRwWLk2O71Z8ju6mZFxgRW6g/+:36MQL382G1Z8jubnxgRL

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2748c7ec87f6f07d928d4b9f656eae16bea8eaaa7b3130db8463f2b4505fcc77

    • Size

      236KB

    • MD5

      7030492463c98f5aaa99b46e7378a76e

    • SHA1

      4cc2e1d33a966bd9f9fe46230abe1c6a81e29050

    • SHA256

      2748c7ec87f6f07d928d4b9f656eae16bea8eaaa7b3130db8463f2b4505fcc77

    • SHA512

      dcf105e0e2d39c9843b9e8489a7b080e2691326e1c62c6385a3379f999aa22e76a78fd9f7aa7bb61d65488c70e7de3af0a9ff4bc4a2d05ec84b2555202bb64a1

    • SSDEEP

      3072:bp9EkE7N5KCa6QQLAK2hcPRwWLk2O71Z8ju6mZFxgRW6g/+:36MQL382G1Z8jubnxgRL

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks