Overview

overview

10

Static

static

d62cd2baa7...02.exe

windows7-x64

10

d62cd2baa7...02.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d62cd2baa762b63a5c8e143ef7e01e970f9cafd27fb752b711746a8ed8e13d02

  • Size

    228KB

  • Sample

    221030-wv6pwaecfp

  • MD5

    834647087dc3721b98556ac1b5217bf4

  • SHA1

    aa84c9bb2afa6b247e7fe808781c3e112a0826f2

  • SHA256

    d62cd2baa762b63a5c8e143ef7e01e970f9cafd27fb752b711746a8ed8e13d02

  • SHA512

    66190ddda07e95ad02a5630c8a7b86767a3c51f06051d14f12e25ff1303dc2d06dd01276a9bfc8978f7d3aaf65e4479fccab2e4ce11ab00227630e550dd27c78

  • SSDEEP

    6144:gpGDh4jLt4NVcWgyGELwXiS8T+bbhn7aRjS5ZgBbW:sGWntWyD1LiS8lS5ZI

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d62cd2baa762b63a5c8e143ef7e01e970f9cafd27fb752b711746a8ed8e13d02

    • Size

      228KB

    • MD5

      834647087dc3721b98556ac1b5217bf4

    • SHA1

      aa84c9bb2afa6b247e7fe808781c3e112a0826f2

    • SHA256

      d62cd2baa762b63a5c8e143ef7e01e970f9cafd27fb752b711746a8ed8e13d02

    • SHA512

      66190ddda07e95ad02a5630c8a7b86767a3c51f06051d14f12e25ff1303dc2d06dd01276a9bfc8978f7d3aaf65e4479fccab2e4ce11ab00227630e550dd27c78

    • SSDEEP

      6144:gpGDh4jLt4NVcWgyGELwXiS8T+bbhn7aRjS5ZgBbW:sGWntWyD1LiS8lS5ZI

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks