Overview

overview

10

Static

static

77b26037c2...f7.exe

windows7-x64

10

77b26037c2...f7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    77b26037c277cdf542b2a1b62bf272115a7bf12d0b69245b4bb117e09bd348f7

  • Size

    220KB

  • Sample

    221106-swe2rshbf6

  • MD5

    0c32d39f8313e78f56026a4975f63ac0

  • SHA1

    cf672bac257009fa2d750f0eaf045b4e687c87a0

  • SHA256

    77b26037c277cdf542b2a1b62bf272115a7bf12d0b69245b4bb117e09bd348f7

  • SHA512

    564005c7a8a9883576cbc0a4a48158a64a319868420b6688ef5d88062df737bd57e1254c70cfc002761c93c613b95ec4fafc9d33a4d78b1245721c732332673b

  • SSDEEP

    3072:WzgsUSylvsnv5gVzaSCz2HJzqxdJWfIbUbZ5qK:DsUSy9qgzPexMbyK

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      77b26037c277cdf542b2a1b62bf272115a7bf12d0b69245b4bb117e09bd348f7

    • Size

      220KB

    • MD5

      0c32d39f8313e78f56026a4975f63ac0

    • SHA1

      cf672bac257009fa2d750f0eaf045b4e687c87a0

    • SHA256

      77b26037c277cdf542b2a1b62bf272115a7bf12d0b69245b4bb117e09bd348f7

    • SHA512

      564005c7a8a9883576cbc0a4a48158a64a319868420b6688ef5d88062df737bd57e1254c70cfc002761c93c613b95ec4fafc9d33a4d78b1245721c732332673b

    • SSDEEP

      3072:WzgsUSylvsnv5gVzaSCz2HJzqxdJWfIbUbZ5qK:DsUSy9qgzPexMbyK

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks