Overview

overview

10

Static

static

53345614c1...ed.exe

windows7-x64

10

53345614c1...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    53345614c18721e0f30a32673a89b6ad44d001df8aa73c3fd9e9b83eff63f6ed

  • Size

    212KB

  • Sample

    221029-trr17sdhc3

  • MD5

    84fe1dc660ebbbe00c959c20aead0c13

  • SHA1

    5667658d35be3f1d54ca31e798aa887495476bd7

  • SHA256

    53345614c18721e0f30a32673a89b6ad44d001df8aa73c3fd9e9b83eff63f6ed

  • SHA512

    07be5506dd1fc92e71449dbfd883000584872a7ea88d4c395f72bddf43e30e0f3c839cd4791f74ba3f560b1e8accb677893a0c518cd671fb612957a04c4e63da

  • SSDEEP

    6144:3SAQlUWF/B/XQSA5g9+plxVSzfuDkZHxpZgyagnZYsHmv+3sH3OU5GGE9EsWR1sq:zQHEgnZYsG

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      53345614c18721e0f30a32673a89b6ad44d001df8aa73c3fd9e9b83eff63f6ed

    • Size

      212KB

    • MD5

      84fe1dc660ebbbe00c959c20aead0c13

    • SHA1

      5667658d35be3f1d54ca31e798aa887495476bd7

    • SHA256

      53345614c18721e0f30a32673a89b6ad44d001df8aa73c3fd9e9b83eff63f6ed

    • SHA512

      07be5506dd1fc92e71449dbfd883000584872a7ea88d4c395f72bddf43e30e0f3c839cd4791f74ba3f560b1e8accb677893a0c518cd671fb612957a04c4e63da

    • SSDEEP

      6144:3SAQlUWF/B/XQSA5g9+plxVSzfuDkZHxpZgyagnZYsHmv+3sH3OU5GGE9EsWR1sq:zQHEgnZYsG

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks