Overview

overview

10

Static

static

002b1ea364...72.exe

windows7-x64

10

002b1ea364...72.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    002b1ea364d98cb94d90af4bc17b169b022858631a4aca3d8297216cccf89372

  • Size

    104KB

  • Sample

    221030-ask5hadde3

  • MD5

    928737778eb27eaa804cb0de09981cd0

  • SHA1

    d71702bb32cc1d1dc954e851586e01ecf23e512c

  • SHA256

    002b1ea364d98cb94d90af4bc17b169b022858631a4aca3d8297216cccf89372

  • SHA512

    ba0f52b95d8dc066fd230e2e8d589d87bdd951c37c35b304e80273b57141694f68e466a54a4eabd2bde44461b395358b14c420c9258968ce5d0f1eb9d66fc365

  • SSDEEP

    1536:T253fElJZScK43sKeWjwJBAOs9G2HaQNsMj3i6E3j:a53fElJkIsK0IHxN/Oj

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      002b1ea364d98cb94d90af4bc17b169b022858631a4aca3d8297216cccf89372

    • Size

      104KB

    • MD5

      928737778eb27eaa804cb0de09981cd0

    • SHA1

      d71702bb32cc1d1dc954e851586e01ecf23e512c

    • SHA256

      002b1ea364d98cb94d90af4bc17b169b022858631a4aca3d8297216cccf89372

    • SHA512

      ba0f52b95d8dc066fd230e2e8d589d87bdd951c37c35b304e80273b57141694f68e466a54a4eabd2bde44461b395358b14c420c9258968ce5d0f1eb9d66fc365

    • SSDEEP

      1536:T253fElJZScK43sKeWjwJBAOs9G2HaQNsMj3i6E3j:a53fElJkIsK0IHxN/Oj

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks