Overview

overview

10

Static

static

4a15b14471...8b.exe

windows7-x64

10

4a15b14471...8b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4a15b14471581b28301516e08b3f7e6c030ffeaf88ce70638b27c6bd3215198b

  • Size

    140KB

  • Sample

    221029-tpsvqaeecj

  • MD5

    849ab737b936f40bc74b753164aa37a5

  • SHA1

    16f6b5e79699591ab9d357d129cb898ddcf1fb17

  • SHA256

    4a15b14471581b28301516e08b3f7e6c030ffeaf88ce70638b27c6bd3215198b

  • SHA512

    90b10256ee4a4fd02f85742661c2c6a768c4d72e0d78fcc41529707c7a9b0acd8a89660e29196b8bad1b4c97528d1396f92009e36e58172a9dc540381052bbd1

  • SSDEEP

    3072:K9Pp7FuHCxABX562J7fT4PE6fUeeYkLpE6H94oQZiEy/W9:kFufBJ1J7f8zkSOWL

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      4a15b14471581b28301516e08b3f7e6c030ffeaf88ce70638b27c6bd3215198b

    • Size

      140KB

    • MD5

      849ab737b936f40bc74b753164aa37a5

    • SHA1

      16f6b5e79699591ab9d357d129cb898ddcf1fb17

    • SHA256

      4a15b14471581b28301516e08b3f7e6c030ffeaf88ce70638b27c6bd3215198b

    • SHA512

      90b10256ee4a4fd02f85742661c2c6a768c4d72e0d78fcc41529707c7a9b0acd8a89660e29196b8bad1b4c97528d1396f92009e36e58172a9dc540381052bbd1

    • SSDEEP

      3072:K9Pp7FuHCxABX562J7fT4PE6fUeeYkLpE6H94oQZiEy/W9:kFufBJ1J7f8zkSOWL

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks