Overview

overview

10

Static

static

14bc6da689...9a.exe

windows7-x64

10

14bc6da689...9a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    14bc6da689091f28365d7da8f34539907e984b653df5418d2f8bad5ac8b6389a

  • Size

    156KB

  • Sample

    221123-tcegkagg2v

  • MD5

    50e759d1453f57f7557fc6201f6c49d9

  • SHA1

    e6a4ecf4b0d7748cdfd957e282a80911317fbf01

  • SHA256

    14bc6da689091f28365d7da8f34539907e984b653df5418d2f8bad5ac8b6389a

  • SHA512

    6dcc44051996c3e66318f45255c7ee7f642b8e10f3ff8e93158598590b69d727cca043234bafecd73a55d1605b28f6d26815bc4114835a53a5272b7378af0939

  • SSDEEP

    1536:PYkumDuYBcBU8gRDGHPOGMmUbaxGAka+t/K9rCGaV9mw7Jqx8M+dzAb5QgRV8:fDuYBqa4UbaxqkCGaVD7JqfKAb6o8

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      14bc6da689091f28365d7da8f34539907e984b653df5418d2f8bad5ac8b6389a

    • Size

      156KB

    • MD5

      50e759d1453f57f7557fc6201f6c49d9

    • SHA1

      e6a4ecf4b0d7748cdfd957e282a80911317fbf01

    • SHA256

      14bc6da689091f28365d7da8f34539907e984b653df5418d2f8bad5ac8b6389a

    • SHA512

      6dcc44051996c3e66318f45255c7ee7f642b8e10f3ff8e93158598590b69d727cca043234bafecd73a55d1605b28f6d26815bc4114835a53a5272b7378af0939

    • SSDEEP

      1536:PYkumDuYBcBU8gRDGHPOGMmUbaxGAka+t/K9rCGaV9mw7Jqx8M+dzAb5QgRV8:fDuYBqa4UbaxqkCGaVD7JqfKAb6o8

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks