Overview

overview

10

Static

static

e80ba5f189...36.exe

windows7-x64

10

e80ba5f189...36.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e80ba5f1892c2aff24395c5a8ec03c73d172aec422545a2de3b6929ca032ca36

  • Size

    288KB

  • Sample

    221030-w8brnadhe3

  • MD5

    82e885cc80e5ec524622172eeefecdc0

  • SHA1

    b5a3f52b55072303ae623d4cd36da1892e77271c

  • SHA256

    e80ba5f1892c2aff24395c5a8ec03c73d172aec422545a2de3b6929ca032ca36

  • SHA512

    84f6dfc70c70726193133c642919f2415c06795d021985e80e60f8e6b353b276da6374ba6981a6f89ced59e4b2f5132ec43e5dbf8d163b0d6b2e4cdf18d91f07

  • SSDEEP

    3072:AU0nDvhQdiTyOZAksTCPkix7Fe7dEN8EXgNqf5cTrWi6ei2uiTbtTmH8Fe90p06v:70qiTCbYJFsE0NMCP6wJYj8t/xv

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e80ba5f1892c2aff24395c5a8ec03c73d172aec422545a2de3b6929ca032ca36

    • Size

      288KB

    • MD5

      82e885cc80e5ec524622172eeefecdc0

    • SHA1

      b5a3f52b55072303ae623d4cd36da1892e77271c

    • SHA256

      e80ba5f1892c2aff24395c5a8ec03c73d172aec422545a2de3b6929ca032ca36

    • SHA512

      84f6dfc70c70726193133c642919f2415c06795d021985e80e60f8e6b353b276da6374ba6981a6f89ced59e4b2f5132ec43e5dbf8d163b0d6b2e4cdf18d91f07

    • SSDEEP

      3072:AU0nDvhQdiTyOZAksTCPkix7Fe7dEN8EXgNqf5cTrWi6ei2uiTbtTmH8Fe90p06v:70qiTCbYJFsE0NMCP6wJYj8t/xv

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks