Overview

overview

8

Static

static

5b57169fa6...10.exe

windows7-x64

8

5b57169fa6...10.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b57169fa6f51a3f2637d7617b2f8d47f5ba6eac0df1cdfbb9133cf557d86a10

  • Size

    536KB

  • Sample

    221123-vm4d4scd5t

  • MD5

    fc2472e28eed7f3f6a81c555f354d2b5

  • SHA1

    9816556c3686b40b49eebc4c0ee9150fc9fd65fb

  • SHA256

    5b57169fa6f51a3f2637d7617b2f8d47f5ba6eac0df1cdfbb9133cf557d86a10

  • SHA512

    53db6d2076160ade69dad76189cc1f471423926a56da05929282d33b0448f45296fae6a2c0d6e44275e46e3558ce05067eb43024621d20dc48ba4a51ca36750f

  • SSDEEP

    12288:V1CBmI0PmdHZvsKhd2pvCT3sWmqE8O9+MnjkloF6+8dQ:V1CBmI0P8H69pvqc599XnQlI6+9

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      5b57169fa6f51a3f2637d7617b2f8d47f5ba6eac0df1cdfbb9133cf557d86a10

    • Size

      536KB

    • MD5

      fc2472e28eed7f3f6a81c555f354d2b5

    • SHA1

      9816556c3686b40b49eebc4c0ee9150fc9fd65fb

    • SHA256

      5b57169fa6f51a3f2637d7617b2f8d47f5ba6eac0df1cdfbb9133cf557d86a10

    • SHA512

      53db6d2076160ade69dad76189cc1f471423926a56da05929282d33b0448f45296fae6a2c0d6e44275e46e3558ce05067eb43024621d20dc48ba4a51ca36750f

    • SSDEEP

      12288:V1CBmI0PmdHZvsKhd2pvCT3sWmqE8O9+MnjkloF6+8dQ:V1CBmI0P8H69pvqc599XnQlI6+9

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks