Overview

overview

10

Static

static

5355b1efad...c6.exe

windows7-x64

10

5355b1efad...c6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5355b1efada3cbdf8fd9c2fa52f50569807fe4b473122bef6b981cec96c107c6

  • Size

    246KB

  • Sample

    221030-yj82zagcc8

  • MD5

    a0b1198dd9480672e3a7598993c836c3

  • SHA1

    dd04c59ad97ba62068d70264d8f495901f070e79

  • SHA256

    5355b1efada3cbdf8fd9c2fa52f50569807fe4b473122bef6b981cec96c107c6

  • SHA512

    a5e0260a2d10151284c1e5a1300b516aa6775ea4fe0b1f0d9d6947535dc091197887fd2279ded5b8174afa3d5a88181eb3b87d0f1c46137cb6d746ab9e4c4400

  • SSDEEP

    1536:X11D85ups/oQqI6vmJgGMct4V0FnYmy1DZeKNOct4V0FnYmy1DZeKN/:Mk3U6vh64VynBy1hO64VynBy1h/

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      5355b1efada3cbdf8fd9c2fa52f50569807fe4b473122bef6b981cec96c107c6

    • Size

      246KB

    • MD5

      a0b1198dd9480672e3a7598993c836c3

    • SHA1

      dd04c59ad97ba62068d70264d8f495901f070e79

    • SHA256

      5355b1efada3cbdf8fd9c2fa52f50569807fe4b473122bef6b981cec96c107c6

    • SHA512

      a5e0260a2d10151284c1e5a1300b516aa6775ea4fe0b1f0d9d6947535dc091197887fd2279ded5b8174afa3d5a88181eb3b87d0f1c46137cb6d746ab9e4c4400

    • SSDEEP

      1536:X11D85ups/oQqI6vmJgGMct4V0FnYmy1DZeKNOct4V0FnYmy1DZeKN/:Mk3U6vh64VynBy1hO64VynBy1h/

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks