Overview

overview

10

Static

static

14de294596...89.exe

windows7-x64

10

14de294596...89.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    14de294596bf43cc2ac30332a2abcc99dd583933531d697d1f57897b03e40b89

  • Size

    136KB

  • Sample

    221029-w9x2aaacc2

  • MD5

    a35957d19e0b2980dbe32fe7b4753c90

  • SHA1

    aa146a529ea0abbfb147b6c99a8abfae10db9032

  • SHA256

    14de294596bf43cc2ac30332a2abcc99dd583933531d697d1f57897b03e40b89

  • SHA512

    7a07698931ec231f5c7526df73147a47240856bdf92e4afc8a31c69ff381fcc06fc38f821aea409f0bccb8c630c4eac0871d77c70048ab2e75ff49a076027a90

  • SSDEEP

    3072:Bm2aJKpBBRwjBfQn7WbIqH0ybZBiOllyEmcP82+aVdOt66VGegmN:BmwBiQn7WbIqH0ybZBiOllyE5D+aVkjD

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      14de294596bf43cc2ac30332a2abcc99dd583933531d697d1f57897b03e40b89

    • Size

      136KB

    • MD5

      a35957d19e0b2980dbe32fe7b4753c90

    • SHA1

      aa146a529ea0abbfb147b6c99a8abfae10db9032

    • SHA256

      14de294596bf43cc2ac30332a2abcc99dd583933531d697d1f57897b03e40b89

    • SHA512

      7a07698931ec231f5c7526df73147a47240856bdf92e4afc8a31c69ff381fcc06fc38f821aea409f0bccb8c630c4eac0871d77c70048ab2e75ff49a076027a90

    • SSDEEP

      3072:Bm2aJKpBBRwjBfQn7WbIqH0ybZBiOllyEmcP82+aVdOt66VGegmN:BmwBiQn7WbIqH0ybZBiOllyE5D+aVkjD

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks