Overview

overview

10

Static

static

4547797f22...68.exe

windows7-x64

10

4547797f22...68.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4547797f228ba69b8ce571de635e3efe60b8b790515b6d69d6a0a4bb6b4c4968

  • Size

    104KB

  • Sample

    221106-nlxrlshea9

  • MD5

    0d4bed79a0839f02ba015d3094384d6e

  • SHA1

    2555d239c5459b685984f104d69e7d43d3e6b32d

  • SHA256

    4547797f228ba69b8ce571de635e3efe60b8b790515b6d69d6a0a4bb6b4c4968

  • SHA512

    da88579e5fa83ee41b82c2a8c0d03e90bc4e200bb622086b74128ae5702edcce86dd1bc1227ea7a826d48a678e9f7241459b97e6bfc86338056f1105429ff1a7

  • SSDEEP

    1536:TLQbAJ8xxp+pofZ71TDdxqh5c2+JTlD/5QOuqXRRRyRAR/RwRzyYWkMktgF4GPgI:f+5+pMI7cv776qL0oDR

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      4547797f228ba69b8ce571de635e3efe60b8b790515b6d69d6a0a4bb6b4c4968

    • Size

      104KB

    • MD5

      0d4bed79a0839f02ba015d3094384d6e

    • SHA1

      2555d239c5459b685984f104d69e7d43d3e6b32d

    • SHA256

      4547797f228ba69b8ce571de635e3efe60b8b790515b6d69d6a0a4bb6b4c4968

    • SHA512

      da88579e5fa83ee41b82c2a8c0d03e90bc4e200bb622086b74128ae5702edcce86dd1bc1227ea7a826d48a678e9f7241459b97e6bfc86338056f1105429ff1a7

    • SSDEEP

      1536:TLQbAJ8xxp+pofZ71TDdxqh5c2+JTlD/5QOuqXRRRyRAR/RwRzyYWkMktgF4GPgI:f+5+pMI7cv776qL0oDR

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks