Overview

overview

10

Static

static

e18582b4c2...0e.exe

windows7-x64

10

e18582b4c2...0e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e18582b4c22fcfe0eba20b72ed850f230c77b0da656545f24d0e691f0de5fa0e

  • Size

    192KB

  • Sample

    221123-xqvbqafg33

  • MD5

    53e4b41a47d7697c411344a5982c944e

  • SHA1

    8fee72da3d291608c85fdfcf8896bbcb01c1ace7

  • SHA256

    e18582b4c22fcfe0eba20b72ed850f230c77b0da656545f24d0e691f0de5fa0e

  • SHA512

    c118fb074bfc9fd9db392e7de2d04d8afccf02f4f0739c27005b6160b0cc725e807d915a24046a78fb6b6f0ec685f25372888aaf8ca6572f2eee8478c71eed1e

  • SSDEEP

    1536:hMHABQruHlTqS7PRi4iti93MH9iV6MRfWzzp3BHReQbIYL2XoPLJB514R9/dJqiD:W2QraTqSLRi4itiSHXzp3uYTPLJOhD

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e18582b4c22fcfe0eba20b72ed850f230c77b0da656545f24d0e691f0de5fa0e

    • Size

      192KB

    • MD5

      53e4b41a47d7697c411344a5982c944e

    • SHA1

      8fee72da3d291608c85fdfcf8896bbcb01c1ace7

    • SHA256

      e18582b4c22fcfe0eba20b72ed850f230c77b0da656545f24d0e691f0de5fa0e

    • SHA512

      c118fb074bfc9fd9db392e7de2d04d8afccf02f4f0739c27005b6160b0cc725e807d915a24046a78fb6b6f0ec685f25372888aaf8ca6572f2eee8478c71eed1e

    • SSDEEP

      1536:hMHABQruHlTqS7PRi4iti93MH9iV6MRfWzzp3BHReQbIYL2XoPLJB514R9/dJqiD:W2QraTqSLRi4itiSHXzp3uYTPLJOhD

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks