Overview

overview

10

Static

static

a281f121d6...0b.exe

windows7-x64

10

a281f121d6...0b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a281f121d6bf8ac9e3a954211192fc31d7da32338fbe1d107da2f75c40fc730b

  • Size

    152KB

  • Sample

    221121-rwmaeahc3x

  • MD5

    3b6849a0af41ac69c5803120c9845da0

  • SHA1

    d6fc4245ebf27ca6b7ba3e01ecb7028a126a9a1a

  • SHA256

    a281f121d6bf8ac9e3a954211192fc31d7da32338fbe1d107da2f75c40fc730b

  • SHA512

    2581ca764edefdeac567f7ecbbfc5b3a6cab633afcbfcf8120b7284a0938f608263517cf5e8575ce912ea01e90c089ae897164e08e7ef574b91585604de0d38e

  • SSDEEP

    3072:t5EGeHCzwrCaHHvhtbz0wXtV2eZDEUXni7fo7KSif8xWM33r3k1jTCZU4oQZiE7f:0G0CzwrCW/0AHa8nuo7KSif8xWM33r3B

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a281f121d6bf8ac9e3a954211192fc31d7da32338fbe1d107da2f75c40fc730b

    • Size

      152KB

    • MD5

      3b6849a0af41ac69c5803120c9845da0

    • SHA1

      d6fc4245ebf27ca6b7ba3e01ecb7028a126a9a1a

    • SHA256

      a281f121d6bf8ac9e3a954211192fc31d7da32338fbe1d107da2f75c40fc730b

    • SHA512

      2581ca764edefdeac567f7ecbbfc5b3a6cab633afcbfcf8120b7284a0938f608263517cf5e8575ce912ea01e90c089ae897164e08e7ef574b91585604de0d38e

    • SSDEEP

      3072:t5EGeHCzwrCaHHvhtbz0wXtV2eZDEUXni7fo7KSif8xWM33r3k1jTCZU4oQZiE7f:0G0CzwrCW/0AHa8nuo7KSif8xWM33r3B

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks