Overview

overview

10

Static

static

458b3b2226...98.exe

windows7-x64

10

458b3b2226...98.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    458b3b2226fc2d0b1589a5f1e894fd35ae4ba3732a37ca6d3118731f7ca8f998

  • Size

    180KB

  • Sample

    221029-tv3bcaegep

  • MD5

    8513a9e5eace40722501bc28362f880f

  • SHA1

    855f22f0acd3759b3f71ee49b7e8813c920367c7

  • SHA256

    458b3b2226fc2d0b1589a5f1e894fd35ae4ba3732a37ca6d3118731f7ca8f998

  • SHA512

    16ed3213140e51ffe0dfa2f886fdbddcf856789a9d6aa721f2143e65f8456d3bb381642676d7513b5094ae2ea448baf1f8d5b054cc7d642e53852914ad0e53f1

  • SSDEEP

    3072:jiu7ehhNrWlAIJqPYNbihKovbAM4VkRvjCKuz3EwBT3edZlSL6aOuTOunpE7bVGx:j5uhNrWlAIJqPYNbihRzrNvjITEeedZv

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      458b3b2226fc2d0b1589a5f1e894fd35ae4ba3732a37ca6d3118731f7ca8f998

    • Size

      180KB

    • MD5

      8513a9e5eace40722501bc28362f880f

    • SHA1

      855f22f0acd3759b3f71ee49b7e8813c920367c7

    • SHA256

      458b3b2226fc2d0b1589a5f1e894fd35ae4ba3732a37ca6d3118731f7ca8f998

    • SHA512

      16ed3213140e51ffe0dfa2f886fdbddcf856789a9d6aa721f2143e65f8456d3bb381642676d7513b5094ae2ea448baf1f8d5b054cc7d642e53852914ad0e53f1

    • SSDEEP

      3072:jiu7ehhNrWlAIJqPYNbihKovbAM4VkRvjCKuz3EwBT3edZlSL6aOuTOunpE7bVGx:j5uhNrWlAIJqPYNbihRzrNvjITEeedZv

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks