Overview

overview

10

Static

static

2bcaae7e57...38.exe

windows7-x64

10

2bcaae7e57...38.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2bcaae7e5705716e27a0bcc2223cdf243b5b5f2def0b530a72d217ed1899f938

  • Size

    156KB

  • Sample

    221123-vz8vcsdd8t

  • MD5

    533aa13c57b689025a255fee6e061cd0

  • SHA1

    36e5cc1d16076d7198ed20341a32c5c3213eade0

  • SHA256

    2bcaae7e5705716e27a0bcc2223cdf243b5b5f2def0b530a72d217ed1899f938

  • SHA512

    baeb608c404c949787105bcf7fcd2d0f24f648f79f3b71dc157bb15dee6e09778c86f3205a770b20335f4aeea92a9d7caa4203e70c371a2e5b9446bb990d60e5

  • SSDEEP

    3072:ALySbYWrO0VctCPmJIHE+gRyRSIuznLst94oQZiEV7ZL:zHGPctCrEaRQL6WzF

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2bcaae7e5705716e27a0bcc2223cdf243b5b5f2def0b530a72d217ed1899f938

    • Size

      156KB

    • MD5

      533aa13c57b689025a255fee6e061cd0

    • SHA1

      36e5cc1d16076d7198ed20341a32c5c3213eade0

    • SHA256

      2bcaae7e5705716e27a0bcc2223cdf243b5b5f2def0b530a72d217ed1899f938

    • SHA512

      baeb608c404c949787105bcf7fcd2d0f24f648f79f3b71dc157bb15dee6e09778c86f3205a770b20335f4aeea92a9d7caa4203e70c371a2e5b9446bb990d60e5

    • SSDEEP

      3072:ALySbYWrO0VctCPmJIHE+gRyRSIuznLst94oQZiEV7ZL:zHGPctCrEaRQL6WzF

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks