Overview

overview

10

Static

static

a619488d80...43.exe

windows7-x64

10

a619488d80...43.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a619488d80ac16577de0a5a0edc1fe5016204f3ac804175fd8d0fdfc13963243

  • Size

    96KB

  • Sample

    221030-asjlnsebfm

  • MD5

    a2e2d4aa9b49757ff8280db150ac9070

  • SHA1

    c80d1f8cd5ba2ab476b9908cce56e542b1611533

  • SHA256

    a619488d80ac16577de0a5a0edc1fe5016204f3ac804175fd8d0fdfc13963243

  • SHA512

    f7c226600754a017a9eebd638259db77f39f3bcf268bce4a7441aa42529512bf1da1c8b799fd07fc0f7bc63618d339c4d263da044dcabcd35d74d64be95f1ff9

  • SSDEEP

    1536:viQcpNEsTCfNEHYkJouJjcXCSuyAn7a3i6EmqQQ:ejckJouJjcgcQ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a619488d80ac16577de0a5a0edc1fe5016204f3ac804175fd8d0fdfc13963243

    • Size

      96KB

    • MD5

      a2e2d4aa9b49757ff8280db150ac9070

    • SHA1

      c80d1f8cd5ba2ab476b9908cce56e542b1611533

    • SHA256

      a619488d80ac16577de0a5a0edc1fe5016204f3ac804175fd8d0fdfc13963243

    • SHA512

      f7c226600754a017a9eebd638259db77f39f3bcf268bce4a7441aa42529512bf1da1c8b799fd07fc0f7bc63618d339c4d263da044dcabcd35d74d64be95f1ff9

    • SSDEEP

      1536:viQcpNEsTCfNEHYkJouJjcXCSuyAn7a3i6EmqQQ:ejckJouJjcgcQ

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks