Overview

overview

10

Static

static

fee217dcab...a6.exe

windows7-x64

10

fee217dcab...a6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fee217dcab889cb89d812fdb8298fa75a4c2db00e3b900a92a25c81cd03a94a6

  • Size

    88KB

  • Sample

    221030-xfr4lsfdcp

  • MD5

    8257d53fa7c8702ba346d962b31a6c1a

  • SHA1

    8c6944ff4f08dc6b17a5210053d8bf8c3501a982

  • SHA256

    fee217dcab889cb89d812fdb8298fa75a4c2db00e3b900a92a25c81cd03a94a6

  • SHA512

    a189f4d69520801040a76de06cecc95535bc3e93a899238adcc3e931b5f3fdd03afba024a156a2049fba5027afdad2d56094afabd264117b4dec800304224c8e

  • SSDEEP

    1536:YAKgIQ/JDHKa5EJWceYljNZQ6vDmNmoGj:BKgI8DHKu8lzDNoGj

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      fee217dcab889cb89d812fdb8298fa75a4c2db00e3b900a92a25c81cd03a94a6

    • Size

      88KB

    • MD5

      8257d53fa7c8702ba346d962b31a6c1a

    • SHA1

      8c6944ff4f08dc6b17a5210053d8bf8c3501a982

    • SHA256

      fee217dcab889cb89d812fdb8298fa75a4c2db00e3b900a92a25c81cd03a94a6

    • SHA512

      a189f4d69520801040a76de06cecc95535bc3e93a899238adcc3e931b5f3fdd03afba024a156a2049fba5027afdad2d56094afabd264117b4dec800304224c8e

    • SSDEEP

      1536:YAKgIQ/JDHKa5EJWceYljNZQ6vDmNmoGj:BKgI8DHKu8lzDNoGj

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks