Overview

overview

10

Static

static

33f5d5c204...8c.exe

windows7-x64

10

33f5d5c204...8c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    33f5d5c2044e454379dd449e049e5e95a0d8644ebd3cb86f5d0c84ea8a9e1a8c

  • Size

    204KB

  • Sample

    221107-cc8a7sccb4

  • MD5

    057ce4cf8ee52146ba45951109b0d333

  • SHA1

    269137ba91852d50dc3275f8c480c74ea4a89904

  • SHA256

    33f5d5c2044e454379dd449e049e5e95a0d8644ebd3cb86f5d0c84ea8a9e1a8c

  • SHA512

    e847a2ba9d64d5be77e5a5bcd679f65ce5c66fe75306fbe39dc57f96b0dd78762a682f92486493491766fcc0e9b414f99b3dd35614ba0eef58758415a5a1ebcc

  • SSDEEP

    3072:0AWLd32FYGY6iojqOayjUrrU2f7HbEH1/rK9o3m/p:0/6iojquErTf7HoWo3k

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      33f5d5c2044e454379dd449e049e5e95a0d8644ebd3cb86f5d0c84ea8a9e1a8c

    • Size

      204KB

    • MD5

      057ce4cf8ee52146ba45951109b0d333

    • SHA1

      269137ba91852d50dc3275f8c480c74ea4a89904

    • SHA256

      33f5d5c2044e454379dd449e049e5e95a0d8644ebd3cb86f5d0c84ea8a9e1a8c

    • SHA512

      e847a2ba9d64d5be77e5a5bcd679f65ce5c66fe75306fbe39dc57f96b0dd78762a682f92486493491766fcc0e9b414f99b3dd35614ba0eef58758415a5a1ebcc

    • SSDEEP

      3072:0AWLd32FYGY6iojqOayjUrrU2f7HbEH1/rK9o3m/p:0/6iojquErTf7HoWo3k

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks