Overview

overview

10

Static

static

668e3f57f2...22.exe

windows7-x64

10

668e3f57f2...22.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    668e3f57f2fd42244c89c2206b0e410f6cf0fc602f6803f942ea96fd79569822

  • Size

    68KB

  • Sample

    221029-pbr9tafghp

  • MD5

    7381a00ce6ef90c8660015460c00db6e

  • SHA1

    8d482482c1b5025f90af1887d581f554b96d6c2d

  • SHA256

    668e3f57f2fd42244c89c2206b0e410f6cf0fc602f6803f942ea96fd79569822

  • SHA512

    1ad5715c9b6a74eea806c3239149bd56b4a695439ce4e22c646a2bc1f5d534bf2bb0349f89de56e741eedbda1bd26d577dfe373af94cc6757ae8b6159d0167bb

  • SSDEEP

    768:8cYliTde+Al+qOQSgFrhKo//WomvdfQXwYt1IEDIefZsK:bYIxJAcqOK3qowgnt1d

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      668e3f57f2fd42244c89c2206b0e410f6cf0fc602f6803f942ea96fd79569822

    • Size

      68KB

    • MD5

      7381a00ce6ef90c8660015460c00db6e

    • SHA1

      8d482482c1b5025f90af1887d581f554b96d6c2d

    • SHA256

      668e3f57f2fd42244c89c2206b0e410f6cf0fc602f6803f942ea96fd79569822

    • SHA512

      1ad5715c9b6a74eea806c3239149bd56b4a695439ce4e22c646a2bc1f5d534bf2bb0349f89de56e741eedbda1bd26d577dfe373af94cc6757ae8b6159d0167bb

    • SSDEEP

      768:8cYliTde+Al+qOQSgFrhKo//WomvdfQXwYt1IEDIefZsK:bYIxJAcqOK3qowgnt1d

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks