Overview

overview

10

Static

static

68b90b8099...48.exe

windows7-x64

10

68b90b8099...48.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    68b90b809986ca1706ee11fbf4c7609fdfe356eb236d98c222a5cc25aeab7d48

  • Size

    172KB

  • Sample

    221124-anvs5seh85

  • MD5

    43766670e31e2167903d6506d954d9d1

  • SHA1

    27a2cd4dd63d8a9f4cee5f0d9f1943ff92e1e33a

  • SHA256

    68b90b809986ca1706ee11fbf4c7609fdfe356eb236d98c222a5cc25aeab7d48

  • SHA512

    0ef9cbf4e204b61a879d49231a323c64b44412b8e7c5ac835cc3bc21ddad07a8de3d03d5e118c69013a23c6fea3fed6297a6b9a96806aefe346549738651dcab

  • SSDEEP

    3072:MKCqVcS+4xLKGPQb6pLnq1AbpaMAePjT9273c0IyXTzTon8:TVxLKGPQbWqliF27MuHT/

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      68b90b809986ca1706ee11fbf4c7609fdfe356eb236d98c222a5cc25aeab7d48

    • Size

      172KB

    • MD5

      43766670e31e2167903d6506d954d9d1

    • SHA1

      27a2cd4dd63d8a9f4cee5f0d9f1943ff92e1e33a

    • SHA256

      68b90b809986ca1706ee11fbf4c7609fdfe356eb236d98c222a5cc25aeab7d48

    • SHA512

      0ef9cbf4e204b61a879d49231a323c64b44412b8e7c5ac835cc3bc21ddad07a8de3d03d5e118c69013a23c6fea3fed6297a6b9a96806aefe346549738651dcab

    • SSDEEP

      3072:MKCqVcS+4xLKGPQb6pLnq1AbpaMAePjT9273c0IyXTzTon8:TVxLKGPQbWqliF27MuHT/

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

1
T1158

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Hidden Files and Directories

1
T1158

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks