Overview

overview

10

Static

static

4f462304b8...0c.exe

windows7-x64

10

4f462304b8...0c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4f462304b884b141632ed1414cfcae6b2b5d7469671b6aaa85c26852444b130c

  • Size

    256KB

  • Sample

    221124-apetbaab51

  • MD5

    27ad36ee38f82bde9c88e85f86b2cca0

  • SHA1

    71e4e044c94a4d6d8a86463c37e269c98dddbe8a

  • SHA256

    4f462304b884b141632ed1414cfcae6b2b5d7469671b6aaa85c26852444b130c

  • SHA512

    34d5734516e361887aca7fc1fe1e76f07e3b8865870d6013c2b2e5c1a938bee2844fd61d3ca48f38ebfe498955ffea3bc86f0d2b6174c06a0e98e1d036ea3220

  • SSDEEP

    3072:hraH9QMWASd7yBov5dRvm7GG3n8P1R4qYVWdVIQk1AQ2eg:FaH9QdAohCj341aqy5Q

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      4f462304b884b141632ed1414cfcae6b2b5d7469671b6aaa85c26852444b130c

    • Size

      256KB

    • MD5

      27ad36ee38f82bde9c88e85f86b2cca0

    • SHA1

      71e4e044c94a4d6d8a86463c37e269c98dddbe8a

    • SHA256

      4f462304b884b141632ed1414cfcae6b2b5d7469671b6aaa85c26852444b130c

    • SHA512

      34d5734516e361887aca7fc1fe1e76f07e3b8865870d6013c2b2e5c1a938bee2844fd61d3ca48f38ebfe498955ffea3bc86f0d2b6174c06a0e98e1d036ea3220

    • SSDEEP

      3072:hraH9QMWASd7yBov5dRvm7GG3n8P1R4qYVWdVIQk1AQ2eg:FaH9QdAohCj341aqy5Q

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks