Overview

overview

8

Static

static

e5bcffcc6e...27.exe

windows7-x64

8

e5bcffcc6e...27.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e5bcffcc6e510fb65f637228347d21333e1db68f318f6177c62dcbe726365f27

  • Size

    146KB

  • Sample

    221123-p273ysfh41

  • MD5

    7cb4c6f17636d1435a2e204a40d83dfa

  • SHA1

    81e5288f689bec1e60919bdafd4a876ef5a09ee5

  • SHA256

    e5bcffcc6e510fb65f637228347d21333e1db68f318f6177c62dcbe726365f27

  • SHA512

    2487b5bc4b4ccc02ef685dbec9c468f34a0325864ef4c6ed074c5b1435e5b9ba62e076f737a3bad15c218926bb1cdb43e69720c5be85925ffe9c972076295dda

  • SSDEEP

    3072:l32GhNvl17xJALpbUzDLpx08ujEqPfPZ/bbU6R9bQ/iaaaiaaaaaaaaaB:F2GhNJJ+Wx+8z4xHR9bQ/

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      e5bcffcc6e510fb65f637228347d21333e1db68f318f6177c62dcbe726365f27

    • Size

      146KB

    • MD5

      7cb4c6f17636d1435a2e204a40d83dfa

    • SHA1

      81e5288f689bec1e60919bdafd4a876ef5a09ee5

    • SHA256

      e5bcffcc6e510fb65f637228347d21333e1db68f318f6177c62dcbe726365f27

    • SHA512

      2487b5bc4b4ccc02ef685dbec9c468f34a0325864ef4c6ed074c5b1435e5b9ba62e076f737a3bad15c218926bb1cdb43e69720c5be85925ffe9c972076295dda

    • SSDEEP

      3072:l32GhNvl17xJALpbUzDLpx08ujEqPfPZ/bbU6R9bQ/iaaaiaaaaaaaaaB:F2GhNJJ+Wx+8z4xHR9bQ/

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks