Overview

overview

10

Static

static

8044468750...80.exe

windows7-x64

10

8044468750...80.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    80444687509876e649143c5b0ee645a2cd78af5e40803021bba496ccdb94b780

  • Size

    204KB

  • Sample

    221030-gqznfaeha2

  • MD5

    9384a149ccbfc7aa951729c899554bf5

  • SHA1

    31f8b4f42c3998ecac2fc4a230dd28f8827ff160

  • SHA256

    80444687509876e649143c5b0ee645a2cd78af5e40803021bba496ccdb94b780

  • SHA512

    e1c23a5f5949a0d09761cd6f22b510ef2cef1c0c819bfbad9fc228a862397fc1e8d1cdaec74687a9062221804d593ec2b53cfc8a4bd9133675f80cc8d80ea029

  • SSDEEP

    3072:CAWLd32FYGYeiojqOayjUrrU2f7HbEH1/rKvo3m73:C/eiojquErTf7HoIo36

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      80444687509876e649143c5b0ee645a2cd78af5e40803021bba496ccdb94b780

    • Size

      204KB

    • MD5

      9384a149ccbfc7aa951729c899554bf5

    • SHA1

      31f8b4f42c3998ecac2fc4a230dd28f8827ff160

    • SHA256

      80444687509876e649143c5b0ee645a2cd78af5e40803021bba496ccdb94b780

    • SHA512

      e1c23a5f5949a0d09761cd6f22b510ef2cef1c0c819bfbad9fc228a862397fc1e8d1cdaec74687a9062221804d593ec2b53cfc8a4bd9133675f80cc8d80ea029

    • SSDEEP

      3072:CAWLd32FYGYeiojqOayjUrrU2f7HbEH1/rKvo3m73:C/eiojquErTf7HoIo36

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks