Overview

overview

10

Static

static

0cb9e42daa...9c.exe

windows7-x64

10

0cb9e42daa...9c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0cb9e42daa989203750a7ad20b55ebde7950ddccf04e806c5111ce7b7ccabd9c

  • Size

    60KB

  • Sample

    221107-wlvk9adcdj

  • MD5

    0d8019c17d6bcbccfa182ca35d0bfa1d

  • SHA1

    8b506e22812d9bea90a1df63b354742aa24ef5a6

  • SHA256

    0cb9e42daa989203750a7ad20b55ebde7950ddccf04e806c5111ce7b7ccabd9c

  • SHA512

    b1a6a6436b03591f86cf48b5fb804f5a891d383ede37f715abb37527ee428dce5fb92b032d727eca1955729a70b85df462b3d848d15dfbaa314963c18e2fa1a5

  • SSDEEP

    768:wXkmpnBc/vupnsyRg6+9A/v/bVlbdfs3OfKDHGIHY56Wv:wXkEpn7u6y43wY56Wv

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0cb9e42daa989203750a7ad20b55ebde7950ddccf04e806c5111ce7b7ccabd9c

    • Size

      60KB

    • MD5

      0d8019c17d6bcbccfa182ca35d0bfa1d

    • SHA1

      8b506e22812d9bea90a1df63b354742aa24ef5a6

    • SHA256

      0cb9e42daa989203750a7ad20b55ebde7950ddccf04e806c5111ce7b7ccabd9c

    • SHA512

      b1a6a6436b03591f86cf48b5fb804f5a891d383ede37f715abb37527ee428dce5fb92b032d727eca1955729a70b85df462b3d848d15dfbaa314963c18e2fa1a5

    • SSDEEP

      768:wXkmpnBc/vupnsyRg6+9A/v/bVlbdfs3OfKDHGIHY56Wv:wXkEpn7u6y43wY56Wv

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks