Overview

overview

10

Static

static

b9348ce721...a6.exe

windows7-x64

10

b9348ce721...a6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b9348ce7214acb6383144e90d44701c522a2ec2704d2e5996c84b7bce7e7a4a6

  • Size

    252KB

  • Sample

    221106-stjl6shah6

  • MD5

    032d5c71a743f833e7d8c5552fa91c50

  • SHA1

    d33ddef8e7e0738b50f532fd65ff133e22bac95c

  • SHA256

    b9348ce7214acb6383144e90d44701c522a2ec2704d2e5996c84b7bce7e7a4a6

  • SHA512

    a44a0365302b9198fe745c38b12c57d3ce6f82769286dbc8fc69156589f549ac8902525db042a386fcfdaa0a42695a53fa222f4c36b8672d6631563811de801e

  • SSDEEP

    3072:VrAcCx7LaWsWvZ0OgRqTAJcLGGO/xuiEyJeOOeGs5oxnkNzQKtjYz:VrYFx/ZLA4PmG6dc

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b9348ce7214acb6383144e90d44701c522a2ec2704d2e5996c84b7bce7e7a4a6

    • Size

      252KB

    • MD5

      032d5c71a743f833e7d8c5552fa91c50

    • SHA1

      d33ddef8e7e0738b50f532fd65ff133e22bac95c

    • SHA256

      b9348ce7214acb6383144e90d44701c522a2ec2704d2e5996c84b7bce7e7a4a6

    • SHA512

      a44a0365302b9198fe745c38b12c57d3ce6f82769286dbc8fc69156589f549ac8902525db042a386fcfdaa0a42695a53fa222f4c36b8672d6631563811de801e

    • SSDEEP

      3072:VrAcCx7LaWsWvZ0OgRqTAJcLGGO/xuiEyJeOOeGs5oxnkNzQKtjYz:VrYFx/ZLA4PmG6dc

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks