Overview

overview

10

Static

static

44615c5e4d...d1.exe

windows7-x64

10

44615c5e4d...d1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44615c5e4dc5b5660161eec6170ab12f68586c9a81d44685bd0f0429824ab0d1

  • Size

    124KB

  • Sample

    221030-y3zyeaabhn

  • MD5

    a132b763aec8a92172ab08ee9c948910

  • SHA1

    8e0f213d21103782a9bbcfc5e41a905e54a7532e

  • SHA256

    44615c5e4dc5b5660161eec6170ab12f68586c9a81d44685bd0f0429824ab0d1

  • SHA512

    e1f4d3ce4f01380de6f1cf61829ed92ea47ac71415ff7ebd4fce34c4509de02a346e4de260a49bf2a676980ed9597ebf74c2fa506e2d568b70f31fe6e2a8ab9e

  • SSDEEP

    1536:E4szu5YAy3yhRO/N69BH3OoGa+FLHjKceRgrkOSoINeGUmE:nGcYL3yhkFoN3Oo1+FvfSW

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      44615c5e4dc5b5660161eec6170ab12f68586c9a81d44685bd0f0429824ab0d1

    • Size

      124KB

    • MD5

      a132b763aec8a92172ab08ee9c948910

    • SHA1

      8e0f213d21103782a9bbcfc5e41a905e54a7532e

    • SHA256

      44615c5e4dc5b5660161eec6170ab12f68586c9a81d44685bd0f0429824ab0d1

    • SHA512

      e1f4d3ce4f01380de6f1cf61829ed92ea47ac71415ff7ebd4fce34c4509de02a346e4de260a49bf2a676980ed9597ebf74c2fa506e2d568b70f31fe6e2a8ab9e

    • SSDEEP

      1536:E4szu5YAy3yhRO/N69BH3OoGa+FLHjKceRgrkOSoINeGUmE:nGcYL3yhkFoN3Oo1+FvfSW

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks