Overview

overview

10

Static

static

f4a5108107...41.exe

windows7-x64

10

f4a5108107...41.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f4a51081077213456429ab4a1fd2efd5912141d583cfa83e032eb4fb123f7941

  • Size

    172KB

  • Sample

    221107-ze99xaahal

  • MD5

    05b18d00679326498ccb879a67d5564c

  • SHA1

    d16892ce71e84f56c3867ded3df9494ecfee2b8a

  • SHA256

    f4a51081077213456429ab4a1fd2efd5912141d583cfa83e032eb4fb123f7941

  • SHA512

    784b5f725e724fca0146f49e53fbf47fd6dc93002d56867a48ee45912f0dd3a4cf970fc06ebab2a25aae5abf0d1b7c3a53990c22ca367e328f25522b53752679

  • SSDEEP

    3072:pZhDLsNgqeXF3mnDMqkVfJX936oDoZqWrvKeG8o:hDLsNgLV3mnDMqkpJX93GZqWry/

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      f4a51081077213456429ab4a1fd2efd5912141d583cfa83e032eb4fb123f7941

    • Size

      172KB

    • MD5

      05b18d00679326498ccb879a67d5564c

    • SHA1

      d16892ce71e84f56c3867ded3df9494ecfee2b8a

    • SHA256

      f4a51081077213456429ab4a1fd2efd5912141d583cfa83e032eb4fb123f7941

    • SHA512

      784b5f725e724fca0146f49e53fbf47fd6dc93002d56867a48ee45912f0dd3a4cf970fc06ebab2a25aae5abf0d1b7c3a53990c22ca367e328f25522b53752679

    • SSDEEP

      3072:pZhDLsNgqeXF3mnDMqkVfJX936oDoZqWrvKeG8o:hDLsNgLV3mnDMqkpJX93GZqWry/

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks