Overview

overview

10

Static

static

231e7b2917...fa.exe

windows7-x64

10

231e7b2917...fa.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    231e7b2917afa8e1084a74aabe5c9ae133e081871a48983b2fbb42dbb47d77fa

  • Size

    176KB

  • Sample

    221107-w3lpnsebfm

  • MD5

    0f4fab2eeb070eca65666e89808cd13d

  • SHA1

    d70c768e9c3fa2aee92d1ec1de65f1445d4ec764

  • SHA256

    231e7b2917afa8e1084a74aabe5c9ae133e081871a48983b2fbb42dbb47d77fa

  • SHA512

    d301e300679887004c84d93442a9e6a54705b0887cae89e5b29e8f91b8b4e02f42a713078ea6e5742b736f3cbdcd66da6b5983e10f2256ec042f8d3ec3d7c77d

  • SSDEEP

    3072:DFBxoh8C/nROzg7iiwJvXZETcbLn67kLpyRurohZbsn4KhWNUzMzGV5/bBD3yqrm:RBKh7YU7iiwJvXZETcbLn6YLProhZbss

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      231e7b2917afa8e1084a74aabe5c9ae133e081871a48983b2fbb42dbb47d77fa

    • Size

      176KB

    • MD5

      0f4fab2eeb070eca65666e89808cd13d

    • SHA1

      d70c768e9c3fa2aee92d1ec1de65f1445d4ec764

    • SHA256

      231e7b2917afa8e1084a74aabe5c9ae133e081871a48983b2fbb42dbb47d77fa

    • SHA512

      d301e300679887004c84d93442a9e6a54705b0887cae89e5b29e8f91b8b4e02f42a713078ea6e5742b736f3cbdcd66da6b5983e10f2256ec042f8d3ec3d7c77d

    • SSDEEP

      3072:DFBxoh8C/nROzg7iiwJvXZETcbLn67kLpyRurohZbsn4KhWNUzMzGV5/bBD3yqrm:RBKh7YU7iiwJvXZETcbLn6YLProhZbss

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks