Overview

overview

10

Static

static

dfa44ccfac...61.exe

windows7-x64

10

dfa44ccfac...61.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dfa44ccfac214bf951a3e07460d93a497c322c4efec4d861a89538b1ede04161

  • Size

    68KB

  • Sample

    221030-a7ew2aeher

  • MD5

    a31da2a223e0557331cd618ec6579b40

  • SHA1

    c6cde6dc1b1876827f1588418ee7964784d48134

  • SHA256

    dfa44ccfac214bf951a3e07460d93a497c322c4efec4d861a89538b1ede04161

  • SHA512

    6931219c45c29c1a940c2f8a5a5a6c2759d667f4ebe8d3e97ba0eeaeaffcc0ae958fc0eb26b95fded63930faf6e801ab5d9047f9feed3c0fb071b7ab2f644439

  • SSDEEP

    768:acaliTdadQXAl+qOQSgFrhKo//WomvdfQXwYt1IEDIefZsK:RaIxHAcqOK3qowgnt1d

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      dfa44ccfac214bf951a3e07460d93a497c322c4efec4d861a89538b1ede04161

    • Size

      68KB

    • MD5

      a31da2a223e0557331cd618ec6579b40

    • SHA1

      c6cde6dc1b1876827f1588418ee7964784d48134

    • SHA256

      dfa44ccfac214bf951a3e07460d93a497c322c4efec4d861a89538b1ede04161

    • SHA512

      6931219c45c29c1a940c2f8a5a5a6c2759d667f4ebe8d3e97ba0eeaeaffcc0ae958fc0eb26b95fded63930faf6e801ab5d9047f9feed3c0fb071b7ab2f644439

    • SSDEEP

      768:acaliTdadQXAl+qOQSgFrhKo//WomvdfQXwYt1IEDIefZsK:RaIxHAcqOK3qowgnt1d

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks