Overview

overview

10

Static

static

872ea02150...b2.exe

windows7-x64

10

872ea02150...b2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    872ea02150ecd0b2c46aae1b4afda9d9a50870a467a2c935c21a0d0a11101eb2

  • Size

    68KB

  • Sample

    221123-zsaq7sdf66

  • MD5

    640ee5aca02880858e882006ea36b202

  • SHA1

    41d38e5ceca634d08a612dfe66cb0f250d23a2ae

  • SHA256

    872ea02150ecd0b2c46aae1b4afda9d9a50870a467a2c935c21a0d0a11101eb2

  • SHA512

    8a82b7c6d8ff6617f88f73f90c08ee89fe835d0703ff7d89d2c92731827154d4c37c05de12b9ffafe7754efab02cdc5c10af8b3caf8b4d34d7944409f50b71a6

  • SSDEEP

    768:UcgliTdOqAl+qOQSgFrhKo//WomvdfQXwYt1IEDIefZsK:TgIx5AcqOK3qowgnt1d

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      872ea02150ecd0b2c46aae1b4afda9d9a50870a467a2c935c21a0d0a11101eb2

    • Size

      68KB

    • MD5

      640ee5aca02880858e882006ea36b202

    • SHA1

      41d38e5ceca634d08a612dfe66cb0f250d23a2ae

    • SHA256

      872ea02150ecd0b2c46aae1b4afda9d9a50870a467a2c935c21a0d0a11101eb2

    • SHA512

      8a82b7c6d8ff6617f88f73f90c08ee89fe835d0703ff7d89d2c92731827154d4c37c05de12b9ffafe7754efab02cdc5c10af8b3caf8b4d34d7944409f50b71a6

    • SSDEEP

      768:UcgliTdOqAl+qOQSgFrhKo//WomvdfQXwYt1IEDIefZsK:TgIx5AcqOK3qowgnt1d

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks