Overview

overview

10

Static

static

9ea307bbec...94.exe

windows7-x64

10

9ea307bbec...94.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9ea307bbec060c25e80edcf94656775ee7d86e28d3cf4660110aef5efb31ab94

  • Size

    140KB

  • Sample

    221106-spt74sghb5

  • MD5

    07509c7d2211974823aa612437250c00

  • SHA1

    5f878bccbc843d7e09f882af3211d72805d67f37

  • SHA256

    9ea307bbec060c25e80edcf94656775ee7d86e28d3cf4660110aef5efb31ab94

  • SHA512

    531638def19c841da61b4b5aec3c12f70a92c97b25898d5af886506827e0c240ed8816fc5dd737e49fe314b13390467b4f4e07922a6f3f6c68cbc6a11b87005d

  • SSDEEP

    3072:QBgclSAY5uXq0cu3XMO4nZLJY0PoeU60ohKdlLWO3:QBoAY5uXq0cu3XMO4nZLJPot60ohKdlL

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      9ea307bbec060c25e80edcf94656775ee7d86e28d3cf4660110aef5efb31ab94

    • Size

      140KB

    • MD5

      07509c7d2211974823aa612437250c00

    • SHA1

      5f878bccbc843d7e09f882af3211d72805d67f37

    • SHA256

      9ea307bbec060c25e80edcf94656775ee7d86e28d3cf4660110aef5efb31ab94

    • SHA512

      531638def19c841da61b4b5aec3c12f70a92c97b25898d5af886506827e0c240ed8816fc5dd737e49fe314b13390467b4f4e07922a6f3f6c68cbc6a11b87005d

    • SSDEEP

      3072:QBgclSAY5uXq0cu3XMO4nZLJY0PoeU60ohKdlLWO3:QBoAY5uXq0cu3XMO4nZLJPot60ohKdlL

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks