Overview

overview

10

Static

static

d34a76ed09...9f.exe

windows7-x64

10

d34a76ed09...9f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d34a76ed09b2c3f04c9643f7a4d712511b8d4fa595a3354cccfaa0ac7b6fec9f

  • Size

    232KB

  • Sample

    221028-w269zsafdn

  • MD5

    0c66d2cd77ba91af2ea43aaab5edf400

  • SHA1

    e7de469a9d0a24b7ea5be3c3558b9bca2ee7b103

  • SHA256

    d34a76ed09b2c3f04c9643f7a4d712511b8d4fa595a3354cccfaa0ac7b6fec9f

  • SHA512

    ff53b76af330fee138381f3aee0870bb6d2dc6fbc137b92a5fc2453fdd35f4f6988c4fac2ce9ad3732a35d48cd8891c0a5d652d9850e99c74b2d5adc1291ded5

  • SSDEEP

    6144:1N3j3uetpWlJ2TqzhVtJXdxI78vT+EnwKj+Sk5Q/x:/z32hVtJXdxpvTJntqr5Q/x

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d34a76ed09b2c3f04c9643f7a4d712511b8d4fa595a3354cccfaa0ac7b6fec9f

    • Size

      232KB

    • MD5

      0c66d2cd77ba91af2ea43aaab5edf400

    • SHA1

      e7de469a9d0a24b7ea5be3c3558b9bca2ee7b103

    • SHA256

      d34a76ed09b2c3f04c9643f7a4d712511b8d4fa595a3354cccfaa0ac7b6fec9f

    • SHA512

      ff53b76af330fee138381f3aee0870bb6d2dc6fbc137b92a5fc2453fdd35f4f6988c4fac2ce9ad3732a35d48cd8891c0a5d652d9850e99c74b2d5adc1291ded5

    • SSDEEP

      6144:1N3j3uetpWlJ2TqzhVtJXdxI78vT+EnwKj+Sk5Q/x:/z32hVtJXdxpvTJntqr5Q/x

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks