Overview

overview

10

Static

static

4f0ecb5fa7...2c.exe

windows7-x64

10

4f0ecb5fa7...2c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4f0ecb5fa787618aeec2105daba6f905c400a65e893c1326efacd1c6c68f6a2c

  • Size

    284KB

  • Sample

    221107-t2g9ragae5

  • MD5

    0d0aaa93658b9966a2876889a3d93116

  • SHA1

    53194c21bf0f1f987d7cee49e22d49151eb5b9b7

  • SHA256

    4f0ecb5fa787618aeec2105daba6f905c400a65e893c1326efacd1c6c68f6a2c

  • SHA512

    a537cb92082783b713e65395d85a416643452dce23aabf0ca0c7b93ffbc9459056cd875dde12f8253bbd8b45b26da5197c6bb3f442230e3581f42a6a3e95a8b6

  • SSDEEP

    3072:q0A2afa1Abn4DpS41Zr8EbjfmNwXl1RgxfGDP8F2dqMOkeuF7SzoqJBX:5ay1Az4Dp7R8cA0l1RpLtJj7Sk4

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      4f0ecb5fa787618aeec2105daba6f905c400a65e893c1326efacd1c6c68f6a2c

    • Size

      284KB

    • MD5

      0d0aaa93658b9966a2876889a3d93116

    • SHA1

      53194c21bf0f1f987d7cee49e22d49151eb5b9b7

    • SHA256

      4f0ecb5fa787618aeec2105daba6f905c400a65e893c1326efacd1c6c68f6a2c

    • SHA512

      a537cb92082783b713e65395d85a416643452dce23aabf0ca0c7b93ffbc9459056cd875dde12f8253bbd8b45b26da5197c6bb3f442230e3581f42a6a3e95a8b6

    • SSDEEP

      3072:q0A2afa1Abn4DpS41Zr8EbjfmNwXl1RgxfGDP8F2dqMOkeuF7SzoqJBX:5ay1Az4Dp7R8cA0l1RpLtJj7Sk4

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks