Overview

overview

10

Static

static

67251cb15a...4c.exe

windows7-x64

10

67251cb15a...4c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    67251cb15ae25b777b0677244d0fab369be57f25779b79674439a6b50787b04c

  • Size

    200KB

  • Sample

    221123-xm3tpaae3s

  • MD5

    5cc267d2ba4689e197dac3025046e260

  • SHA1

    7ea97b226cc20da133e6e627224f0a654b3f9ab5

  • SHA256

    67251cb15ae25b777b0677244d0fab369be57f25779b79674439a6b50787b04c

  • SHA512

    2df8978a9230f472a0689b768b28ce360775bfae356b0a6ed084ff3d217ffb56c9b7c5f2a5e34ff2a6b638d91618f680c7241a8d9e80d0f83d322061d50b29e6

  • SSDEEP

    3072:DTtcstTstk/pSBAFtbCduLCADMcgg7ker:ftcATstk/pp2ADMVC

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      67251cb15ae25b777b0677244d0fab369be57f25779b79674439a6b50787b04c

    • Size

      200KB

    • MD5

      5cc267d2ba4689e197dac3025046e260

    • SHA1

      7ea97b226cc20da133e6e627224f0a654b3f9ab5

    • SHA256

      67251cb15ae25b777b0677244d0fab369be57f25779b79674439a6b50787b04c

    • SHA512

      2df8978a9230f472a0689b768b28ce360775bfae356b0a6ed084ff3d217ffb56c9b7c5f2a5e34ff2a6b638d91618f680c7241a8d9e80d0f83d322061d50b29e6

    • SSDEEP

      3072:DTtcstTstk/pSBAFtbCduLCADMcgg7ker:ftcATstk/pp2ADMVC

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

1
T1158

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Hidden Files and Directories

1
T1158

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks