Overview

overview

10

Static

static

5d86577d56...6b.exe

windows7-x64

10

5d86577d56...6b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5d86577d56cab5f009211b0b96610362b1bbaa26650b87780719c48830cf786b

  • Size

    68KB

  • Sample

    221124-a8xhgabf5w

  • MD5

    445df8df902e56cef8a79266750888c0

  • SHA1

    63b12faf696f967b68dc3931726863e45f809834

  • SHA256

    5d86577d56cab5f009211b0b96610362b1bbaa26650b87780719c48830cf786b

  • SHA512

    120445aae3191153a3f131bfe638e2fb3339b7b684db50753798548c38da827f91d3858b86ef57cc8c639e549036e1c6f340fd81ad8772808c289847e1ed66bf

  • SSDEEP

    768:rcLliTda1SAl+qOQSgFrhKo//WomvdfQXwYt1IEDIefZsK:QLIx2SAcqOK3qowgnt1d

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      5d86577d56cab5f009211b0b96610362b1bbaa26650b87780719c48830cf786b

    • Size

      68KB

    • MD5

      445df8df902e56cef8a79266750888c0

    • SHA1

      63b12faf696f967b68dc3931726863e45f809834

    • SHA256

      5d86577d56cab5f009211b0b96610362b1bbaa26650b87780719c48830cf786b

    • SHA512

      120445aae3191153a3f131bfe638e2fb3339b7b684db50753798548c38da827f91d3858b86ef57cc8c639e549036e1c6f340fd81ad8772808c289847e1ed66bf

    • SSDEEP

      768:rcLliTda1SAl+qOQSgFrhKo//WomvdfQXwYt1IEDIefZsK:QLIx2SAcqOK3qowgnt1d

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks