Overview

overview

10

Static

static

8df0745626...a3.exe

windows7-x64

10

8df0745626...a3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8df0745626904fc9ff5af58d3f0da4fa8b453332c8ee799f5dd8a446af31b9a3

  • Size

    135KB

  • Sample

    221123-yfj9faaa43

  • MD5

    518a2c56294764404a2f7129e7ca69f0

  • SHA1

    fe0560e4a6774be4ec42b3f9613c30af56edbc1c

  • SHA256

    8df0745626904fc9ff5af58d3f0da4fa8b453332c8ee799f5dd8a446af31b9a3

  • SHA512

    85e884faf29dbc4e227892ee9a3fe1539c3e525a54a20e52762eb9b9939cf4928d5a65458abd2db19009fe0f5a77d16c39f4638dd62f63db0b6f6af930bdb54b

  • SSDEEP

    3072:7Z65Cm/c3VsweCeXRzeSeVeEe0eDQ8jrTrd:t4Hc3VsZR3Q8jrTr

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      8df0745626904fc9ff5af58d3f0da4fa8b453332c8ee799f5dd8a446af31b9a3

    • Size

      135KB

    • MD5

      518a2c56294764404a2f7129e7ca69f0

    • SHA1

      fe0560e4a6774be4ec42b3f9613c30af56edbc1c

    • SHA256

      8df0745626904fc9ff5af58d3f0da4fa8b453332c8ee799f5dd8a446af31b9a3

    • SHA512

      85e884faf29dbc4e227892ee9a3fe1539c3e525a54a20e52762eb9b9939cf4928d5a65458abd2db19009fe0f5a77d16c39f4638dd62f63db0b6f6af930bdb54b

    • SSDEEP

      3072:7Z65Cm/c3VsweCeXRzeSeVeEe0eDQ8jrTrd:t4Hc3VsZR3Q8jrTr

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks