Overview

overview

10

Static

static

e0ef3ebb11...95.exe

windows7-x64

10

e0ef3ebb11...95.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e0ef3ebb115e59d1c189659145b8959a718bac98e46a20c9ba2e51ca56ec0495

  • Size

    148KB

  • Sample

    221107-zm75hsbcak

  • MD5

    0b91825a6f64181ec08803f6e078a0e8

  • SHA1

    ffe94beed62d61702ac6b4c44ce5d7f4367ce2bf

  • SHA256

    e0ef3ebb115e59d1c189659145b8959a718bac98e46a20c9ba2e51ca56ec0495

  • SHA512

    984416981fb901a441e622be513b7f4a464b575211b03ffa705d38a94edd27b885a298559daba64ef97882f22f32d8ed4ea54229db09e304a88db9b24d64b1e3

  • SSDEEP

    3072:iSexqFzxgwMylAUR6UQUcJPPB5RPXsS+t9ji49E5j4oQ7:iuFzxgZVU49xEtlid

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e0ef3ebb115e59d1c189659145b8959a718bac98e46a20c9ba2e51ca56ec0495

    • Size

      148KB

    • MD5

      0b91825a6f64181ec08803f6e078a0e8

    • SHA1

      ffe94beed62d61702ac6b4c44ce5d7f4367ce2bf

    • SHA256

      e0ef3ebb115e59d1c189659145b8959a718bac98e46a20c9ba2e51ca56ec0495

    • SHA512

      984416981fb901a441e622be513b7f4a464b575211b03ffa705d38a94edd27b885a298559daba64ef97882f22f32d8ed4ea54229db09e304a88db9b24d64b1e3

    • SSDEEP

      3072:iSexqFzxgwMylAUR6UQUcJPPB5RPXsS+t9ji49E5j4oQ7:iuFzxgZVU49xEtlid

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks