Overview

overview

10

Static

static

d155f899de...33.exe

windows7-x64

10

d155f899de...33.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d155f899deec0938a43ad6038270333b387744df07e92f3d6e5b693db895ee33

  • Size

    256KB

  • Sample

    221030-ydzlcafhh4

  • MD5

    91d83f1c14f188004527720ba0cf6be6

  • SHA1

    80a751bcd966e54b9ae7239046b8ed9e670e9a03

  • SHA256

    d155f899deec0938a43ad6038270333b387744df07e92f3d6e5b693db895ee33

  • SHA512

    5b0c3b007eec8278e5738990e4d8dc6852f20c547e7388387a7b401bf1f5bb745f9770ad4e696bc3304146ddb6a06ec7bbfb87c67b6174fb6199f2836bbf3b4f

  • SSDEEP

    6144:9VGuQZUvhOoOirF1rsNjqH94M7RNo913Ml2Knvmb7/D26QkQeOzRoJ:JQZUvhOoOMF1rsNjqgH3Ml2Knvmb7/DB

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d155f899deec0938a43ad6038270333b387744df07e92f3d6e5b693db895ee33

    • Size

      256KB

    • MD5

      91d83f1c14f188004527720ba0cf6be6

    • SHA1

      80a751bcd966e54b9ae7239046b8ed9e670e9a03

    • SHA256

      d155f899deec0938a43ad6038270333b387744df07e92f3d6e5b693db895ee33

    • SHA512

      5b0c3b007eec8278e5738990e4d8dc6852f20c547e7388387a7b401bf1f5bb745f9770ad4e696bc3304146ddb6a06ec7bbfb87c67b6174fb6199f2836bbf3b4f

    • SSDEEP

      6144:9VGuQZUvhOoOirF1rsNjqH94M7RNo913Ml2Knvmb7/D26QkQeOzRoJ:JQZUvhOoOMF1rsNjqgH3Ml2Knvmb7/DB

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks