Overview

overview

10

Static

static

7776e3e018...46.exe

windows7-x64

10

7776e3e018...46.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7776e3e018a6ef2ff745f70d7839f77cde1b52fa22925c083262cc19b8a04346

  • Size

    124KB

  • Sample

    221124-ap9cxsac2s

  • MD5

    44ac07d58f07f1594a55bc17dbfe9e70

  • SHA1

    e9dc1da316b2b778e0663a16c407f7bfb18476d8

  • SHA256

    7776e3e018a6ef2ff745f70d7839f77cde1b52fa22925c083262cc19b8a04346

  • SHA512

    917bccdb002f3b1103127f38d5c8c7feb4ff7190d1bf391e75acd812fd1b7d7d94f6896a43e2ec64a6cee6ade6bee53385e5a6529f93c5469bc590b3c17f6555

  • SSDEEP

    1536:CPszI5YmThRO/N69BH3OoGa+FLHjKceRgrkOSoINeGUmE:WG6YYhkFoN3Oo1+FvfSW

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      7776e3e018a6ef2ff745f70d7839f77cde1b52fa22925c083262cc19b8a04346

    • Size

      124KB

    • MD5

      44ac07d58f07f1594a55bc17dbfe9e70

    • SHA1

      e9dc1da316b2b778e0663a16c407f7bfb18476d8

    • SHA256

      7776e3e018a6ef2ff745f70d7839f77cde1b52fa22925c083262cc19b8a04346

    • SHA512

      917bccdb002f3b1103127f38d5c8c7feb4ff7190d1bf391e75acd812fd1b7d7d94f6896a43e2ec64a6cee6ade6bee53385e5a6529f93c5469bc590b3c17f6555

    • SSDEEP

      1536:CPszI5YmThRO/N69BH3OoGa+FLHjKceRgrkOSoINeGUmE:WG6YYhkFoN3Oo1+FvfSW

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks