Overview

overview

10

Static

static

fa41f67c03...c4.exe

windows7-x64

10

fa41f67c03...c4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa41f67c03127215b111fe2d184fcb077ab195c485117fca22f7c51167972ec4

  • Size

    260KB

  • Sample

    221107-zjq2tsbael

  • MD5

    0204a77c15966d98f92c4bf746101230

  • SHA1

    288d3615177e8a415ff3851dc374c2c4e2c41ba1

  • SHA256

    fa41f67c03127215b111fe2d184fcb077ab195c485117fca22f7c51167972ec4

  • SHA512

    de3e0b8694dc8467bef415668a13ca2f8861153099a31916b2a29eea7a8888f3f9e5b5c2f313deb51acb37f75df3fbc57a7cbd53ab56a17ad764c66fca3f8318

  • SSDEEP

    6144:sgRymUhL25VGQllHiU6ZdCFqhVeVHEv++G:sgR5UhL2lHiU6ZdFPeilG

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      fa41f67c03127215b111fe2d184fcb077ab195c485117fca22f7c51167972ec4

    • Size

      260KB

    • MD5

      0204a77c15966d98f92c4bf746101230

    • SHA1

      288d3615177e8a415ff3851dc374c2c4e2c41ba1

    • SHA256

      fa41f67c03127215b111fe2d184fcb077ab195c485117fca22f7c51167972ec4

    • SHA512

      de3e0b8694dc8467bef415668a13ca2f8861153099a31916b2a29eea7a8888f3f9e5b5c2f313deb51acb37f75df3fbc57a7cbd53ab56a17ad764c66fca3f8318

    • SSDEEP

      6144:sgRymUhL25VGQllHiU6ZdCFqhVeVHEv++G:sgR5UhL2lHiU6ZdFPeilG

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks