Overview

overview

10

Static

static

86899093a8...ed.exe

windows7-x64

10

86899093a8...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    86899093a87fb52223ffba214dc1b23867d7e4ac1aa4d4c72f6b4bde759e27ed

  • Size

    136KB

  • Sample

    221030-aatzpadcfq

  • MD5

    a32e1184d364598b6e5025982e5c4020

  • SHA1

    e1ea1d228612984a440c924ff5aad0b0922b8546

  • SHA256

    86899093a87fb52223ffba214dc1b23867d7e4ac1aa4d4c72f6b4bde759e27ed

  • SHA512

    5c36b22a62549c14a12b2569a990f0bdc3273d12b12b939fd75eb713e72d3320a89862919876ab389b6f6f18f18626abcd91c8b4fd5750a907d43172987cf368

  • SSDEEP

    1536:gFxoN1+F6eKZO2DXseqFC9jtoIKk5M8nKJS4p5oaLBhHSN/y+VLsxh:AoyFpEO2DXseqSo05xx4Qbk+yxh

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      86899093a87fb52223ffba214dc1b23867d7e4ac1aa4d4c72f6b4bde759e27ed

    • Size

      136KB

    • MD5

      a32e1184d364598b6e5025982e5c4020

    • SHA1

      e1ea1d228612984a440c924ff5aad0b0922b8546

    • SHA256

      86899093a87fb52223ffba214dc1b23867d7e4ac1aa4d4c72f6b4bde759e27ed

    • SHA512

      5c36b22a62549c14a12b2569a990f0bdc3273d12b12b939fd75eb713e72d3320a89862919876ab389b6f6f18f18626abcd91c8b4fd5750a907d43172987cf368

    • SSDEEP

      1536:gFxoN1+F6eKZO2DXseqFC9jtoIKk5M8nKJS4p5oaLBhHSN/y+VLsxh:AoyFpEO2DXseqSo05xx4Qbk+yxh

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks