Overview

overview

10

Static

static

fff1b315d0...08.exe

windows7-x64

10

fff1b315d0...08.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fff1b315d0a44a3ef6b60a077e5eb02d411ef60fa0033456219ef12a6f223a08

  • Size

    284KB

  • Sample

    221029-fa67xabed7

  • MD5

    a0beb810c767b3c7f2096211e5600be3

  • SHA1

    e597e5248c0a5e268b3e0b1895f453db23c1147b

  • SHA256

    fff1b315d0a44a3ef6b60a077e5eb02d411ef60fa0033456219ef12a6f223a08

  • SHA512

    b2172258e115d970646fff99ab750b02bb25212bff2ffdf38630c7c2705edf19250e423e4e722ab8ff3a2f71d08490e169c658f8896498cedd334607040a0d4b

  • SSDEEP

    3072:nnayn5bSmpR1TmoNkMl4ymdu+sSi5KKGTKozEDGaKUa6xUgyX6lgq1Kx5RK1fYx+:B5umVmoNkMl4ymdu+sSi5KKGsjO

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      fff1b315d0a44a3ef6b60a077e5eb02d411ef60fa0033456219ef12a6f223a08

    • Size

      284KB

    • MD5

      a0beb810c767b3c7f2096211e5600be3

    • SHA1

      e597e5248c0a5e268b3e0b1895f453db23c1147b

    • SHA256

      fff1b315d0a44a3ef6b60a077e5eb02d411ef60fa0033456219ef12a6f223a08

    • SHA512

      b2172258e115d970646fff99ab750b02bb25212bff2ffdf38630c7c2705edf19250e423e4e722ab8ff3a2f71d08490e169c658f8896498cedd334607040a0d4b

    • SSDEEP

      3072:nnayn5bSmpR1TmoNkMl4ymdu+sSi5KKGTKozEDGaKUa6xUgyX6lgq1Kx5RK1fYx+:B5umVmoNkMl4ymdu+sSi5KKGsjO

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks