Overview

overview

10

Static

static

39eee70048...d8.exe

windows7-x64

10

39eee70048...d8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    39eee700484ac1167a85cb2717eb8ef7b1cbbbb56b3062657a3b70f0a96f8fd8

  • Size

    252KB

  • Sample

    221123-xkzdgsac7s

  • MD5

    4dae4d54123c20558ae5de9d02aefd30

  • SHA1

    a3d86f2d49a4e3ac3c6d456f7f4f920d5a328308

  • SHA256

    39eee700484ac1167a85cb2717eb8ef7b1cbbbb56b3062657a3b70f0a96f8fd8

  • SHA512

    a6597b6cc0b2fcd9b4625c97728aad00690acb39b2135f3ff0d60eaaca1e3d4fb8a60b189704905a6fdbdd9ab1e3f6e44d15ef937d203d6de6450a6980170b26

  • SSDEEP

    3072:VrAc6x7La3sWvZ0OgRqTAJcLGGO/xuiEyJeOOeGs5oxnkNzQKtjBb:VrZFx/ZLA4PmG6dB

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      39eee700484ac1167a85cb2717eb8ef7b1cbbbb56b3062657a3b70f0a96f8fd8

    • Size

      252KB

    • MD5

      4dae4d54123c20558ae5de9d02aefd30

    • SHA1

      a3d86f2d49a4e3ac3c6d456f7f4f920d5a328308

    • SHA256

      39eee700484ac1167a85cb2717eb8ef7b1cbbbb56b3062657a3b70f0a96f8fd8

    • SHA512

      a6597b6cc0b2fcd9b4625c97728aad00690acb39b2135f3ff0d60eaaca1e3d4fb8a60b189704905a6fdbdd9ab1e3f6e44d15ef937d203d6de6450a6980170b26

    • SSDEEP

      3072:VrAc6x7La3sWvZ0OgRqTAJcLGGO/xuiEyJeOOeGs5oxnkNzQKtjBb:VrZFx/ZLA4PmG6dB

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks