Overview

overview

10

Static

static

60e3f0709b...ef.exe

windows7-x64

10

60e3f0709b...ef.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    60e3f0709b44f5c2ea6e2d177741254fa2c745e4f961d81d8085d1652c4183ef

  • Size

    156KB

  • Sample

    221021-eexctsaggr

  • MD5

    49ab5119b0e921b917caa94d90bb0080

  • SHA1

    e82144f322a5f9a4db733e458e9873ad13fdd28f

  • SHA256

    60e3f0709b44f5c2ea6e2d177741254fa2c745e4f961d81d8085d1652c4183ef

  • SHA512

    018abd961bd7a7de6e7581607dc101f8556f9149f889810be88d853d82cf0bbc2b07947b824cb8d7e373036f29a0b2e2b0c3092e67e216db279f87757f7aa7c9

  • SSDEEP

    3072:a5/2cqj0C0H3RvXs45qlCG8v12aO1AwPgamPe42IZ54oQZiEDz:QHW0Lvulf8v12aO1AwSPe4RxWZ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      60e3f0709b44f5c2ea6e2d177741254fa2c745e4f961d81d8085d1652c4183ef

    • Size

      156KB

    • MD5

      49ab5119b0e921b917caa94d90bb0080

    • SHA1

      e82144f322a5f9a4db733e458e9873ad13fdd28f

    • SHA256

      60e3f0709b44f5c2ea6e2d177741254fa2c745e4f961d81d8085d1652c4183ef

    • SHA512

      018abd961bd7a7de6e7581607dc101f8556f9149f889810be88d853d82cf0bbc2b07947b824cb8d7e373036f29a0b2e2b0c3092e67e216db279f87757f7aa7c9

    • SSDEEP

      3072:a5/2cqj0C0H3RvXs45qlCG8v12aO1AwPgamPe42IZ54oQZiEDz:QHW0Lvulf8v12aO1AwSPe4RxWZ

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks