Overview

overview

10

Static

static

3dcc4ed43d...02.exe

windows7-x64

10

3dcc4ed43d...02.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3dcc4ed43df908d897fb95e8a5909e87655a363dcf9d4d5f718a9629fd2cb002

  • Size

    224KB

  • Sample

    221030-yxfycaghf7

  • MD5

    906abf69a34ba3cd60c57c5f52e72db6

  • SHA1

    76aec5b7e1fba2390656c14bbd20b86d203f4636

  • SHA256

    3dcc4ed43df908d897fb95e8a5909e87655a363dcf9d4d5f718a9629fd2cb002

  • SHA512

    648efaa40df97c6aa1278db802e734c7cfd61dbc2303203014fec343efa232d6d208d2961477c6696c3cc63d8dc30c73266a80607c21e34c5aeac3c99d22f129

  • SSDEEP

    3072:Ib3N87hBQWKZV7l2mclfj4Uvx+9sNxu+2eRcKgsU61JkkX39RLrw4ySKUbax2+g9:sNXT74L76nrZA

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      3dcc4ed43df908d897fb95e8a5909e87655a363dcf9d4d5f718a9629fd2cb002

    • Size

      224KB

    • MD5

      906abf69a34ba3cd60c57c5f52e72db6

    • SHA1

      76aec5b7e1fba2390656c14bbd20b86d203f4636

    • SHA256

      3dcc4ed43df908d897fb95e8a5909e87655a363dcf9d4d5f718a9629fd2cb002

    • SHA512

      648efaa40df97c6aa1278db802e734c7cfd61dbc2303203014fec343efa232d6d208d2961477c6696c3cc63d8dc30c73266a80607c21e34c5aeac3c99d22f129

    • SSDEEP

      3072:Ib3N87hBQWKZV7l2mclfj4Uvx+9sNxu+2eRcKgsU61JkkX39RLrw4ySKUbax2+g9:sNXT74L76nrZA

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks