Overview

overview

10

Static

static

73fa2f8044...10.exe

windows7-x64

10

73fa2f8044...10.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    73fa2f8044dab212576cad258fd55f6de051a4fac3f2b6af744cf9d09fa9a510

  • Size

    304KB

  • Sample

    221028-wygvxsadfk

  • MD5

    0b2e7c2853f6505c660518dac28a0850

  • SHA1

    08962cffeb13dcf08dd4c98180e333667d8d55d2

  • SHA256

    73fa2f8044dab212576cad258fd55f6de051a4fac3f2b6af744cf9d09fa9a510

  • SHA512

    63a332314736621cc24d871a26909cf006d520dbf43942328859661beedde6fd4cdc50e17418e7db70c8c07a5d25d3817a25986dcf3f2cb75c7eada4d937baca

  • SSDEEP

    3072:caPCzZRFjFBbVJsnCRcC3xo8ozYH/LSsB4pAnNnfwo7A3sEnYQCASCPepFq:caPuZLfsnHQIz9AnNnolrCAfPepF

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      73fa2f8044dab212576cad258fd55f6de051a4fac3f2b6af744cf9d09fa9a510

    • Size

      304KB

    • MD5

      0b2e7c2853f6505c660518dac28a0850

    • SHA1

      08962cffeb13dcf08dd4c98180e333667d8d55d2

    • SHA256

      73fa2f8044dab212576cad258fd55f6de051a4fac3f2b6af744cf9d09fa9a510

    • SHA512

      63a332314736621cc24d871a26909cf006d520dbf43942328859661beedde6fd4cdc50e17418e7db70c8c07a5d25d3817a25986dcf3f2cb75c7eada4d937baca

    • SSDEEP

      3072:caPCzZRFjFBbVJsnCRcC3xo8ozYH/LSsB4pAnNnfwo7A3sEnYQCASCPepFq:caPuZLfsnHQIz9AnNnolrCAfPepF

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks