Overview

overview

10

Static

static

25f28fa656...34.exe

windows7-x64

10

25f28fa656...34.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    25f28fa656ae54236a70593ee2414c37360093392bf62129de4727b4637ae734

  • Size

    100KB

  • Sample

    221121-ssmmfafc83

  • MD5

    228686c2c7d1c10866ded369159a4060

  • SHA1

    06746b2ca0243388a4f464e04b51941cc9b14c7c

  • SHA256

    25f28fa656ae54236a70593ee2414c37360093392bf62129de4727b4637ae734

  • SHA512

    dd737a8e31db903a091523d45f216fde64ae6f36612bd7f0aef75b1613001672e8d36af45079656b5ab7e4c64fd578cd13f3522c3aa762176409924863c85e56

  • SSDEEP

    1536:cOIUViy9ddd7Y1idNzL7zdddXOpdxCTkQjW/dQqdUxpkddAd3nddd4od5ddMk5dI:RIU8SzBLvBTzFJ0T72er6s

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      25f28fa656ae54236a70593ee2414c37360093392bf62129de4727b4637ae734

    • Size

      100KB

    • MD5

      228686c2c7d1c10866ded369159a4060

    • SHA1

      06746b2ca0243388a4f464e04b51941cc9b14c7c

    • SHA256

      25f28fa656ae54236a70593ee2414c37360093392bf62129de4727b4637ae734

    • SHA512

      dd737a8e31db903a091523d45f216fde64ae6f36612bd7f0aef75b1613001672e8d36af45079656b5ab7e4c64fd578cd13f3522c3aa762176409924863c85e56

    • SSDEEP

      1536:cOIUViy9ddd7Y1idNzL7zdddXOpdxCTkQjW/dQqdUxpkddAd3nddd4od5ddMk5dI:RIU8SzBLvBTzFJ0T72er6s

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks