Overview

overview

10

Static

static

7255155c1c...7f.exe

windows7-x64

10

7255155c1c...7f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7255155c1cad1cd7a35102c935de42bc33640c794dbef703a1489e2b65d3d37f

  • Size

    248KB

  • Sample

    221106-sjlzjsagdq

  • MD5

    0892273d1e20248ca57f1e09a685d4fc

  • SHA1

    d88552f84052b129532ba9c2c138cd991286ddaa

  • SHA256

    7255155c1cad1cd7a35102c935de42bc33640c794dbef703a1489e2b65d3d37f

  • SHA512

    3f61eab5c08ba53e2c0c60f221ba3ce54d114ca7bde65131cf3e84f7e9acf303722f2ec0cb2143dfafcd54b412a9af89d699a060cbe579c72d5ce2d1046bef25

  • SSDEEP

    6144:quU5tPKDZvGqe/6nRefjUIZmBRfh7Fmvxyx7:quUrPKDZvGqe/eefjURRr

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      7255155c1cad1cd7a35102c935de42bc33640c794dbef703a1489e2b65d3d37f

    • Size

      248KB

    • MD5

      0892273d1e20248ca57f1e09a685d4fc

    • SHA1

      d88552f84052b129532ba9c2c138cd991286ddaa

    • SHA256

      7255155c1cad1cd7a35102c935de42bc33640c794dbef703a1489e2b65d3d37f

    • SHA512

      3f61eab5c08ba53e2c0c60f221ba3ce54d114ca7bde65131cf3e84f7e9acf303722f2ec0cb2143dfafcd54b412a9af89d699a060cbe579c72d5ce2d1046bef25

    • SSDEEP

      6144:quU5tPKDZvGqe/6nRefjUIZmBRfh7Fmvxyx7:quUrPKDZvGqe/eefjURRr

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks