Overview

overview

10

Static

static

f21e7eaab5...44.exe

windows7-x64

10

f21e7eaab5...44.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f21e7eaab5d2284c5acd3194a2323141bf3f16aaa153638af92476655f4f4444

  • Size

    104KB

  • Sample

    221029-ttwgeaegap

  • MD5

    83e463c6e2350bd2b1c9fdd1dacb9e09

  • SHA1

    2cb72a62dd552277efbf178cfce2e97a2dd0ef0f

  • SHA256

    f21e7eaab5d2284c5acd3194a2323141bf3f16aaa153638af92476655f4f4444

  • SHA512

    d7d8f3599cf80f3c0158f5c055fc2e9975534595e986b2acbe56e1e37380d008ea4ad9ad5d4e54f2a1a860786dd20451631a7d0918d2321da7550329a35fe557

  • SSDEEP

    1536:gu4nD1OnpgkiuIu8Td6x9uGB+2LGUh5crgqIbflrUHXzIgp2zy9JhTHhNIjnZl:GcwumWOqIUrMzIgp2mJNhCn3

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      f21e7eaab5d2284c5acd3194a2323141bf3f16aaa153638af92476655f4f4444

    • Size

      104KB

    • MD5

      83e463c6e2350bd2b1c9fdd1dacb9e09

    • SHA1

      2cb72a62dd552277efbf178cfce2e97a2dd0ef0f

    • SHA256

      f21e7eaab5d2284c5acd3194a2323141bf3f16aaa153638af92476655f4f4444

    • SHA512

      d7d8f3599cf80f3c0158f5c055fc2e9975534595e986b2acbe56e1e37380d008ea4ad9ad5d4e54f2a1a860786dd20451631a7d0918d2321da7550329a35fe557

    • SSDEEP

      1536:gu4nD1OnpgkiuIu8Td6x9uGB+2LGUh5crgqIbflrUHXzIgp2zy9JhTHhNIjnZl:GcwumWOqIUrMzIgp2mJNhCn3

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks