Overview

overview

10

Static

static

eff19bfa92...c2.exe

windows7-x64

10

eff19bfa92...c2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eff19bfa920c37e67e842d2e79fdda13e012fa83f6e47b9da95c15dbb7ec75c2

  • Size

    156KB

  • Sample

    221030-frqlgsdbh5

  • MD5

    928238a139d51f4e51e709eecddba6f0

  • SHA1

    3842cb5da68ca86168c83779bf55067b5b82119f

  • SHA256

    eff19bfa920c37e67e842d2e79fdda13e012fa83f6e47b9da95c15dbb7ec75c2

  • SHA512

    dc1c9a9e9c71c54ab09773aa0bcb0391940af14426270af2fe571b2ae8c3d3a0491bc7d0f9196b92ccceea1a07e385bcca96e66629309f136a094d47e39a1157

  • SSDEEP

    1536:VoybwEF5//67NxkiQixA+alh98r8Y9USv1jy7wo7JaS3cCMop32+:V/bwEFF/67gjH8ri8iwQ6hoJ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      eff19bfa920c37e67e842d2e79fdda13e012fa83f6e47b9da95c15dbb7ec75c2

    • Size

      156KB

    • MD5

      928238a139d51f4e51e709eecddba6f0

    • SHA1

      3842cb5da68ca86168c83779bf55067b5b82119f

    • SHA256

      eff19bfa920c37e67e842d2e79fdda13e012fa83f6e47b9da95c15dbb7ec75c2

    • SHA512

      dc1c9a9e9c71c54ab09773aa0bcb0391940af14426270af2fe571b2ae8c3d3a0491bc7d0f9196b92ccceea1a07e385bcca96e66629309f136a094d47e39a1157

    • SSDEEP

      1536:VoybwEF5//67NxkiQixA+alh98r8Y9USv1jy7wo7JaS3cCMop32+:V/bwEFF/67gjH8ri8iwQ6hoJ

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks