Overview

overview

10

Static

static

d6230d40a9...d1.exe

windows7-x64

10

d6230d40a9...d1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d6230d40a9370aa71d241a5a8719fcc2d95de6cf1f7be2ef1d989670bbd04ad1

  • Size

    224KB

  • Sample

    221124-amxlcaeh35

  • MD5

    3d3a52e072aea26529fa912e58ddd180

  • SHA1

    4d61a2598335b139e181e31cae9f18c637e2e7e1

  • SHA256

    d6230d40a9370aa71d241a5a8719fcc2d95de6cf1f7be2ef1d989670bbd04ad1

  • SHA512

    f28424a3372d880e9c062a8b6e047c4bf3f906ceecb4494c77a08e4b281e75de8281f32384c9724f9827dcb6d3f74f5e710160c8197c3d900bbcc36f9364c95b

  • SSDEEP

    3072:U5IIlrLsIqrgl4iEzjKTF40qVA0KNBxAlDy:U5IEEIqrgCHpXA0KZAE

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d6230d40a9370aa71d241a5a8719fcc2d95de6cf1f7be2ef1d989670bbd04ad1

    • Size

      224KB

    • MD5

      3d3a52e072aea26529fa912e58ddd180

    • SHA1

      4d61a2598335b139e181e31cae9f18c637e2e7e1

    • SHA256

      d6230d40a9370aa71d241a5a8719fcc2d95de6cf1f7be2ef1d989670bbd04ad1

    • SHA512

      f28424a3372d880e9c062a8b6e047c4bf3f906ceecb4494c77a08e4b281e75de8281f32384c9724f9827dcb6d3f74f5e710160c8197c3d900bbcc36f9364c95b

    • SSDEEP

      3072:U5IIlrLsIqrgl4iEzjKTF40qVA0KNBxAlDy:U5IEEIqrgCHpXA0KZAE

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks