Overview

overview

10

Static

static

463d333bf5...a3.exe

windows7-x64

10

463d333bf5...a3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    463d333bf5f3f1666230d1a8336952d3f53dfd5d83758b2864d2c6dfd85e6fa3

  • Size

    180KB

  • Sample

    221107-t29zrsaccm

  • MD5

    0b262ca8e1220c577c320a0ef285a47c

  • SHA1

    f4dcae971be36c5800a9afbac219f3c0226574af

  • SHA256

    463d333bf5f3f1666230d1a8336952d3f53dfd5d83758b2864d2c6dfd85e6fa3

  • SHA512

    5cf393835a07c81b3f45cb17bcd841de07bc3054cc47fe26b4cc5155522e9cb670aa1b192e3ac24cb94b5599b790d38cab94349ebd1c79b4eaf740c11ed33107

  • SSDEEP

    3072:SIQGdYRLoeEdRos/eaqFnqWDb+uTyLDC6s5sSYqGlC6YViZj5HQXZmmJ0yCFioxG:9xcKPpm2lC6YViZj5HQXZmmJ0yCF9Bxc

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      463d333bf5f3f1666230d1a8336952d3f53dfd5d83758b2864d2c6dfd85e6fa3

    • Size

      180KB

    • MD5

      0b262ca8e1220c577c320a0ef285a47c

    • SHA1

      f4dcae971be36c5800a9afbac219f3c0226574af

    • SHA256

      463d333bf5f3f1666230d1a8336952d3f53dfd5d83758b2864d2c6dfd85e6fa3

    • SHA512

      5cf393835a07c81b3f45cb17bcd841de07bc3054cc47fe26b4cc5155522e9cb670aa1b192e3ac24cb94b5599b790d38cab94349ebd1c79b4eaf740c11ed33107

    • SSDEEP

      3072:SIQGdYRLoeEdRos/eaqFnqWDb+uTyLDC6s5sSYqGlC6YViZj5HQXZmmJ0yCFioxG:9xcKPpm2lC6YViZj5HQXZmmJ0yCF9Bxc

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks