Overview

overview

10

Static

static

772a930471...4d.exe

windows7-x64

10

772a930471...4d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    772a93047136f4d3d714cd1ad7400957f5411a8cbfbc51380dd8339129d0e94d

  • Size

    40KB

  • Sample

    221123-zqtrasde72

  • MD5

    7a22bbfd531b77e796eb1459d41cd806

  • SHA1

    28819871c8ced277329f462f2283d5367548a907

  • SHA256

    772a93047136f4d3d714cd1ad7400957f5411a8cbfbc51380dd8339129d0e94d

  • SHA512

    418777d2702d0f69c857013659b3303a1cd7bea94cf03979c61e7fc7082427b9f3e11767f46f7a87ab1c87226dba29f4ea3ef7f17c2bba5f5c9f883df429a248

  • SSDEEP

    768:BVmfIz1X61wO2J6OpY9x0dHXOHk3CCecGH9C/vc:B1z8wO2J6IY9x6w4RCsvc

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      772a93047136f4d3d714cd1ad7400957f5411a8cbfbc51380dd8339129d0e94d

    • Size

      40KB

    • MD5

      7a22bbfd531b77e796eb1459d41cd806

    • SHA1

      28819871c8ced277329f462f2283d5367548a907

    • SHA256

      772a93047136f4d3d714cd1ad7400957f5411a8cbfbc51380dd8339129d0e94d

    • SHA512

      418777d2702d0f69c857013659b3303a1cd7bea94cf03979c61e7fc7082427b9f3e11767f46f7a87ab1c87226dba29f4ea3ef7f17c2bba5f5c9f883df429a248

    • SSDEEP

      768:BVmfIz1X61wO2J6OpY9x0dHXOHk3CCecGH9C/vc:B1z8wO2J6IY9x6w4RCsvc

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

1
T1158

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Hidden Files and Directories

1
T1158

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks