Overview

overview

10

Static

static

06bfc5a1db...9b.exe

windows7-x64

10

06bfc5a1db...9b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    06bfc5a1dbf9778d91cf2759a4496c5af7d6c508a85afd72f4c9412829c7949b

  • Size

    248KB

  • Sample

    221030-ajqnmadgaq

  • MD5

    a3185bc2d12ebd0ce2c92269bf4ea4c5

  • SHA1

    5117af97885376830eb9971174bbd1b67db71a58

  • SHA256

    06bfc5a1dbf9778d91cf2759a4496c5af7d6c508a85afd72f4c9412829c7949b

  • SHA512

    dc9270a5f08975e7c73f8548f3d2baf81692533abacdea65386becdd5ab31e0b2dc10987034efc3708e2a3be97e95cd414dc4810939cab41eee5fc57a61860f7

  • SSDEEP

    3072:54clvQhDo0BKxWVeBYhInpMFgYykBgfXzRRpGPlOH+cZknPhVUZh:WclcdgEeqPFXTgfV6PlOH+gKP7Q

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      06bfc5a1dbf9778d91cf2759a4496c5af7d6c508a85afd72f4c9412829c7949b

    • Size

      248KB

    • MD5

      a3185bc2d12ebd0ce2c92269bf4ea4c5

    • SHA1

      5117af97885376830eb9971174bbd1b67db71a58

    • SHA256

      06bfc5a1dbf9778d91cf2759a4496c5af7d6c508a85afd72f4c9412829c7949b

    • SHA512

      dc9270a5f08975e7c73f8548f3d2baf81692533abacdea65386becdd5ab31e0b2dc10987034efc3708e2a3be97e95cd414dc4810939cab41eee5fc57a61860f7

    • SSDEEP

      3072:54clvQhDo0BKxWVeBYhInpMFgYykBgfXzRRpGPlOH+cZknPhVUZh:WclcdgEeqPFXTgfV6PlOH+gKP7Q

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks