Overview

overview

10

Static

static

1128a305d9...53.exe

windows7-x64

10

1128a305d9...53.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1128a305d9b9bb2a85cbbf8e7637266e9bd5773b8bb7210b578221ad52fb0d53

  • Size

    92KB

  • Sample

    221123-thwb9shb9s

  • MD5

    4f0691a3b85e5b3d8f23d5fe013c271d

  • SHA1

    17cf23b40fb0135524e49b3ab8f04e6a5f694eb5

  • SHA256

    1128a305d9b9bb2a85cbbf8e7637266e9bd5773b8bb7210b578221ad52fb0d53

  • SHA512

    cb2ad1833dd378ad7c66b2580281f68b820736853b11f76c027bda3b0066795418884d5cfd29b00850443ca68d7a4258ce9696e79592abbaa4e7db25e5579c91

  • SSDEEP

    1536:74gr88vOXsgnZ7QaI056dXJ/kMkRWnSRIsMFWFii3JXqkJZX2BdmNmS/:Z5OsK2BdN

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1128a305d9b9bb2a85cbbf8e7637266e9bd5773b8bb7210b578221ad52fb0d53

    • Size

      92KB

    • MD5

      4f0691a3b85e5b3d8f23d5fe013c271d

    • SHA1

      17cf23b40fb0135524e49b3ab8f04e6a5f694eb5

    • SHA256

      1128a305d9b9bb2a85cbbf8e7637266e9bd5773b8bb7210b578221ad52fb0d53

    • SHA512

      cb2ad1833dd378ad7c66b2580281f68b820736853b11f76c027bda3b0066795418884d5cfd29b00850443ca68d7a4258ce9696e79592abbaa4e7db25e5579c91

    • SSDEEP

      1536:74gr88vOXsgnZ7QaI056dXJ/kMkRWnSRIsMFWFii3JXqkJZX2BdmNmS/:Z5OsK2BdN

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks