Overview

overview

10

Static

static

272e421523...25.exe

windows7-x64

10

272e421523...25.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    272e4215237515acfeb3d6a818660b97e46b85a90fbb8f0404dc4d44e6cda925

  • Size

    224KB

  • Sample

    221124-ae1yssec38

  • MD5

    276ea683aea51e676f728ab681972cfe

  • SHA1

    3482a245e220bf80453897ffb9ce36eb77df9272

  • SHA256

    272e4215237515acfeb3d6a818660b97e46b85a90fbb8f0404dc4d44e6cda925

  • SHA512

    aa318d01d800f77893471365cb9a9d5f5998dde91583a0b4d9c5fb0b586756170a6167cc5e6db8eca4a5534b20a96943d296378af67fd7e46c8f5948afb984f9

  • SSDEEP

    1536:z7r/YQsVV5awoIZsh0CF+sKE0C1rZL4H0c2BHtg1/J+iZAb+g9WCyiHC/XRG1iFg:jAQa5MOFCsv/CL0jJMNWCyiHC31psL

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      272e4215237515acfeb3d6a818660b97e46b85a90fbb8f0404dc4d44e6cda925

    • Size

      224KB

    • MD5

      276ea683aea51e676f728ab681972cfe

    • SHA1

      3482a245e220bf80453897ffb9ce36eb77df9272

    • SHA256

      272e4215237515acfeb3d6a818660b97e46b85a90fbb8f0404dc4d44e6cda925

    • SHA512

      aa318d01d800f77893471365cb9a9d5f5998dde91583a0b4d9c5fb0b586756170a6167cc5e6db8eca4a5534b20a96943d296378af67fd7e46c8f5948afb984f9

    • SSDEEP

      1536:z7r/YQsVV5awoIZsh0CF+sKE0C1rZL4H0c2BHtg1/J+iZAb+g9WCyiHC/XRG1iFg:jAQa5MOFCsv/CL0jJMNWCyiHC31psL

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks