Overview

overview

10

Static

static

20507798c8...0d.exe

windows7-x64

10

20507798c8...0d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20507798c83f15f870013e36cbb6557a95e824d79030670926da9f6bc48b600d

  • Size

    224KB

  • Sample

    221124-amx7waeh37

  • MD5

    0776cea7056519c733f5fcb0c2eb506e

  • SHA1

    d9a9fc03137e9b24396d90b5d6e0c47ab6c7a1ea

  • SHA256

    20507798c83f15f870013e36cbb6557a95e824d79030670926da9f6bc48b600d

  • SHA512

    a9097a1fef6462af39bd2ce7bb54f3bbb6c10d4fd77c9170b324a495118ff69aa94ef9c1651b05988cb1f8375be8ca7aab689ea950eb17c582b2c613dfbb4c15

  • SSDEEP

    3072:W5IIbbsIqrgl4iEzjKTF40qVA0KNBx8lDA:W5IegIqrgCHpXA0KZ8O

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      20507798c83f15f870013e36cbb6557a95e824d79030670926da9f6bc48b600d

    • Size

      224KB

    • MD5

      0776cea7056519c733f5fcb0c2eb506e

    • SHA1

      d9a9fc03137e9b24396d90b5d6e0c47ab6c7a1ea

    • SHA256

      20507798c83f15f870013e36cbb6557a95e824d79030670926da9f6bc48b600d

    • SHA512

      a9097a1fef6462af39bd2ce7bb54f3bbb6c10d4fd77c9170b324a495118ff69aa94ef9c1651b05988cb1f8375be8ca7aab689ea950eb17c582b2c613dfbb4c15

    • SSDEEP

      3072:W5IIbbsIqrgl4iEzjKTF40qVA0KNBx8lDA:W5IegIqrgCHpXA0KZ8O

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

1
T1158

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Hidden Files and Directories

1
T1158

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks