Overview

overview

10

Static

static

ea7f06b43e...bf.exe

windows7-x64

10

ea7f06b43e...bf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea7f06b43e075b240e80cda5e64ee7373cf723d36198729e92abd25b712b19bf

  • Size

    236KB

  • Sample

    221030-gq6fzseha6

  • MD5

    9286151f8e79f2051f15eb210d9bc600

  • SHA1

    bb2fb4a70abea8ac64b982baf2e3493afa45da4c

  • SHA256

    ea7f06b43e075b240e80cda5e64ee7373cf723d36198729e92abd25b712b19bf

  • SHA512

    7492be8ea7e556af154bc16a129876f918e8841375e2c90e30c98f180974d4cf848e19be6e7d84619dad516de2806efc77376cd03c68723455079750f85d0f98

  • SSDEEP

    3072:oW1bobpL7V4sJ/JjZN29xm/NIAHBrVzMpDcB/+X/4YeIz:kl/WE/ZZNWxm/N3H/+X/48

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      ea7f06b43e075b240e80cda5e64ee7373cf723d36198729e92abd25b712b19bf

    • Size

      236KB

    • MD5

      9286151f8e79f2051f15eb210d9bc600

    • SHA1

      bb2fb4a70abea8ac64b982baf2e3493afa45da4c

    • SHA256

      ea7f06b43e075b240e80cda5e64ee7373cf723d36198729e92abd25b712b19bf

    • SHA512

      7492be8ea7e556af154bc16a129876f918e8841375e2c90e30c98f180974d4cf848e19be6e7d84619dad516de2806efc77376cd03c68723455079750f85d0f98

    • SSDEEP

      3072:oW1bobpL7V4sJ/JjZN29xm/NIAHBrVzMpDcB/+X/4YeIz:kl/WE/ZZNWxm/N3H/+X/48

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks