Overview

overview

10

Static

static

93b22fa30f...96.exe

windows7-x64

10

93b22fa30f...96.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    93b22fa30f0a0ec694be3e5af04f98fbee2077f4bc02ce588b34ee72364d7796

  • Size

    172KB

  • Sample

    221124-anvhdaab3t

  • MD5

    25678dca37973e6d99c028665dc1f309

  • SHA1

    59413437e088e999066cb7a968942557b926f168

  • SHA256

    93b22fa30f0a0ec694be3e5af04f98fbee2077f4bc02ce588b34ee72364d7796

  • SHA512

    3aefdd151f95a0f3a6a9105c44626ae8128ccdfd3282ee323c902171900dba654f06464f467eeb2d570e4bd7086ded40f22fea14c45baf206a498069d5f7356b

  • SSDEEP

    3072:KCqtcOZ1+4xLKGPQb6pLnq1AbpaMAePjT9273c0IyX0ygQL53+:WFZJxLKGPQbWqliF27MuBjLB+

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      93b22fa30f0a0ec694be3e5af04f98fbee2077f4bc02ce588b34ee72364d7796

    • Size

      172KB

    • MD5

      25678dca37973e6d99c028665dc1f309

    • SHA1

      59413437e088e999066cb7a968942557b926f168

    • SHA256

      93b22fa30f0a0ec694be3e5af04f98fbee2077f4bc02ce588b34ee72364d7796

    • SHA512

      3aefdd151f95a0f3a6a9105c44626ae8128ccdfd3282ee323c902171900dba654f06464f467eeb2d570e4bd7086ded40f22fea14c45baf206a498069d5f7356b

    • SSDEEP

      3072:KCqtcOZ1+4xLKGPQb6pLnq1AbpaMAePjT9273c0IyX0ygQL53+:WFZJxLKGPQbWqliF27MuBjLB+

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks