Overview

overview

10

Static

static

d3e5af8492...5b.exe

windows7-x64

10

d3e5af8492...5b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d3e5af84928b6a927139bb43415276d51e65454e9b7e3dda4bb7f53d0aaeda5b

  • Size

    172KB

  • Sample

    221121-sr2d7sag6v

  • MD5

    14bf2a7fb2df1c5526da6ae4bf3baa5b

  • SHA1

    255980e954c214ed721bd0bcff89ad3a5def3a90

  • SHA256

    d3e5af84928b6a927139bb43415276d51e65454e9b7e3dda4bb7f53d0aaeda5b

  • SHA512

    f2d064d9603af47411f90ba29b4c643ac758e93b8194c74235ca3e2d90899197626197a52f80807033e48145bd84f21f3ae219eff15c31ab62e277e2122db325

  • SSDEEP

    3072:3Lv69H2dkvY2+ydeYMvnWtmpzaVDSwdac:7vbdkgM03utmQgwP

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d3e5af84928b6a927139bb43415276d51e65454e9b7e3dda4bb7f53d0aaeda5b

    • Size

      172KB

    • MD5

      14bf2a7fb2df1c5526da6ae4bf3baa5b

    • SHA1

      255980e954c214ed721bd0bcff89ad3a5def3a90

    • SHA256

      d3e5af84928b6a927139bb43415276d51e65454e9b7e3dda4bb7f53d0aaeda5b

    • SHA512

      f2d064d9603af47411f90ba29b4c643ac758e93b8194c74235ca3e2d90899197626197a52f80807033e48145bd84f21f3ae219eff15c31ab62e277e2122db325

    • SSDEEP

      3072:3Lv69H2dkvY2+ydeYMvnWtmpzaVDSwdac:7vbdkgM03utmQgwP

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks