Overview

overview

8

Static

static

726ae1a10f...72.exe

windows7-x64

8

726ae1a10f...72.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    726ae1a10f43930043a5d9e2ac52c3da6205dad211df6a090e61a35c8e625d72

  • Size

    105KB

  • Sample

    221030-jcga2saebm

  • MD5

    92e7ff569c7b8502f909d9a4343a7540

  • SHA1

    b17fd9909301eab333093f4ed85ef9debc8faf03

  • SHA256

    726ae1a10f43930043a5d9e2ac52c3da6205dad211df6a090e61a35c8e625d72

  • SHA512

    d4d9c25e2ea2af7ec78e37c019de8be350389f72effb37d741d9a1fe62e62a3eed421e48908228e1b004fea73f60f94222a3875a1d84aab758093b78aa711493

  • SSDEEP

    1536:6r5ePcb2DI8H5p/tj39okTR1wb/EusxuQA7LJWbjTnkNi:oePcbp8ZpJvTwb/4A71kv

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      726ae1a10f43930043a5d9e2ac52c3da6205dad211df6a090e61a35c8e625d72

    • Size

      105KB

    • MD5

      92e7ff569c7b8502f909d9a4343a7540

    • SHA1

      b17fd9909301eab333093f4ed85ef9debc8faf03

    • SHA256

      726ae1a10f43930043a5d9e2ac52c3da6205dad211df6a090e61a35c8e625d72

    • SHA512

      d4d9c25e2ea2af7ec78e37c019de8be350389f72effb37d741d9a1fe62e62a3eed421e48908228e1b004fea73f60f94222a3875a1d84aab758093b78aa711493

    • SSDEEP

      1536:6r5ePcb2DI8H5p/tj39okTR1wb/EusxuQA7LJWbjTnkNi:oePcbp8ZpJvTwb/4A71kv

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks