Overview

overview

10

Static

static

62bfa3fad2...92.exe

windows7-x64

10

62bfa3fad2...92.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    62bfa3fad284bdcd92ea6d87932a9f827803eaa53034c5decf528fa82ea8f992

  • Size

    188KB

  • Sample

    221106-st3eaabcgj

  • MD5

    091188fd291def1cab1e90c4cfc305f0

  • SHA1

    3f63b8d8cde9e38edc1c6de0883110be3897669c

  • SHA256

    62bfa3fad284bdcd92ea6d87932a9f827803eaa53034c5decf528fa82ea8f992

  • SHA512

    4afd63403cca6b0095f7a34d1810b5f2a5454b8467808f5e2ab6cf4b9c6540d78baf01ef01202e5ada51f52dacc505aa449fd5ad0fec9efec36900d0b6877b80

  • SSDEEP

    3072:6j42OHQqQ7b4zxMJsSmJ6nTQFlKRilqoq6v/i:RkqM4zk0cqfMoty

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      62bfa3fad284bdcd92ea6d87932a9f827803eaa53034c5decf528fa82ea8f992

    • Size

      188KB

    • MD5

      091188fd291def1cab1e90c4cfc305f0

    • SHA1

      3f63b8d8cde9e38edc1c6de0883110be3897669c

    • SHA256

      62bfa3fad284bdcd92ea6d87932a9f827803eaa53034c5decf528fa82ea8f992

    • SHA512

      4afd63403cca6b0095f7a34d1810b5f2a5454b8467808f5e2ab6cf4b9c6540d78baf01ef01202e5ada51f52dacc505aa449fd5ad0fec9efec36900d0b6877b80

    • SSDEEP

      3072:6j42OHQqQ7b4zxMJsSmJ6nTQFlKRilqoq6v/i:RkqM4zk0cqfMoty

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks