Overview

overview

10

Static

static

936230b2e5...ed.exe

windows7-x64

10

936230b2e5...ed.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    936230b2e530d6ddd516362cfd7c515ce5cdc8e0e18acbca575d3cc88ce99ded

  • Size

    152KB

  • Sample

    221107-txqqbsfgg6

  • MD5

    07dfc8bbdda382cbee6ec99356fc2d66

  • SHA1

    8f9a41f66a83d433c6d251b96dec229c4bd3b061

  • SHA256

    936230b2e530d6ddd516362cfd7c515ce5cdc8e0e18acbca575d3cc88ce99ded

  • SHA512

    7160b3ecd56920803e22056203e0a063d78dc5f02acab63bd39f3d2cfd612110d7afcde1e367284c36ce1ff49895ebf512a4c01a0fd5ebb733f48d420b15b7c5

  • SSDEEP

    3072:0dSzMr/Yt8wZfLOweRty9bWT4NT4oQZiEcK:bzMrQ+YBeW96TgtW3

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      936230b2e530d6ddd516362cfd7c515ce5cdc8e0e18acbca575d3cc88ce99ded

    • Size

      152KB

    • MD5

      07dfc8bbdda382cbee6ec99356fc2d66

    • SHA1

      8f9a41f66a83d433c6d251b96dec229c4bd3b061

    • SHA256

      936230b2e530d6ddd516362cfd7c515ce5cdc8e0e18acbca575d3cc88ce99ded

    • SHA512

      7160b3ecd56920803e22056203e0a063d78dc5f02acab63bd39f3d2cfd612110d7afcde1e367284c36ce1ff49895ebf512a4c01a0fd5ebb733f48d420b15b7c5

    • SSDEEP

      3072:0dSzMr/Yt8wZfLOweRty9bWT4NT4oQZiEcK:bzMrQ+YBeW96TgtW3

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks