Overview

overview

10

Static

static

2a07b35d0e...00.exe

windows7-x64

10

2a07b35d0e...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a07b35d0e67d8411f0145c2de91ff750ae97fb06f851e71b478f7805f7cc100

  • Size

    168KB

  • Sample

    221123-vlcvrscc3w

  • MD5

    454a3fb58e149902f7727496391200e0

  • SHA1

    4c9c5be7fbf71a84e53c770d7520f5593cc8c980

  • SHA256

    2a07b35d0e67d8411f0145c2de91ff750ae97fb06f851e71b478f7805f7cc100

  • SHA512

    67348ebe3ae99386a47cfd7e516865d7a136fb521054f1a461808ee67e6356bbb0729d48f3413dee8910bbf6223fe59021f9b4eead77b248c5f5411ad1a019ac

  • SSDEEP

    768:c4lvMajhJP5iUwbjMPkG1VuW/wqvRXMXp677yCzdXZRT2Nq1MaQnepMri14PGBEv:c4RlVJh+lGVs4emEFbMP0

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2a07b35d0e67d8411f0145c2de91ff750ae97fb06f851e71b478f7805f7cc100

    • Size

      168KB

    • MD5

      454a3fb58e149902f7727496391200e0

    • SHA1

      4c9c5be7fbf71a84e53c770d7520f5593cc8c980

    • SHA256

      2a07b35d0e67d8411f0145c2de91ff750ae97fb06f851e71b478f7805f7cc100

    • SHA512

      67348ebe3ae99386a47cfd7e516865d7a136fb521054f1a461808ee67e6356bbb0729d48f3413dee8910bbf6223fe59021f9b4eead77b248c5f5411ad1a019ac

    • SSDEEP

      768:c4lvMajhJP5iUwbjMPkG1VuW/wqvRXMXp677yCzdXZRT2Nq1MaQnepMri14PGBEv:c4RlVJh+lGVs4emEFbMP0

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

1
T1158

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Hidden Files and Directories

1
T1158

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks