Overview

overview

10

Static

static

e1f774bb85...c8.exe

windows7-x64

10

e1f774bb85...c8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1f774bb854c1e7997054c49ee2fe41edd33f3653ac9ab2df008bf7b564815c8

  • Size

    92KB

  • Sample

    221123-t8v47agc59

  • MD5

    4881941e8e461fb1949460bcd72227c0

  • SHA1

    fe77c0c5d693da45689842fd85e833ccaf49e6d7

  • SHA256

    e1f774bb854c1e7997054c49ee2fe41edd33f3653ac9ab2df008bf7b564815c8

  • SHA512

    9dbcf541d95199d28fce5fc5c58aa6300356b973bc4ebdce54b4e53d94a94f4a3ab672901afe3ce5affb5c5d4715cc77f402d02cddc9629c59d6ca510a33983b

  • SSDEEP

    1536:akdJ4EVT8JNenyIGmvcTlfbfwKipwFJ0T72mocT:XxYhTxx5FJ0T72mBT

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e1f774bb854c1e7997054c49ee2fe41edd33f3653ac9ab2df008bf7b564815c8

    • Size

      92KB

    • MD5

      4881941e8e461fb1949460bcd72227c0

    • SHA1

      fe77c0c5d693da45689842fd85e833ccaf49e6d7

    • SHA256

      e1f774bb854c1e7997054c49ee2fe41edd33f3653ac9ab2df008bf7b564815c8

    • SHA512

      9dbcf541d95199d28fce5fc5c58aa6300356b973bc4ebdce54b4e53d94a94f4a3ab672901afe3ce5affb5c5d4715cc77f402d02cddc9629c59d6ca510a33983b

    • SSDEEP

      1536:akdJ4EVT8JNenyIGmvcTlfbfwKipwFJ0T72mocT:XxYhTxx5FJ0T72mBT

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks