Overview

overview

10

Static

static

1365aad1fd...59.exe

windows7-x64

10

1365aad1fd...59.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1365aad1fd3ca5269a2c1018186504f5773d2d39c20c6130bdd90e12f1048d59

  • Size

    220KB

  • Sample

    221124-apjghaab6y

  • MD5

    1d97e20c6e5c52c23aacb8292477e78b

  • SHA1

    462c68637084abee678ccc07cce1a844fde80e4c

  • SHA256

    1365aad1fd3ca5269a2c1018186504f5773d2d39c20c6130bdd90e12f1048d59

  • SHA512

    f1cb7e7bf3e45065c2eeee8f65af3b42d8c314e90485c562506b105a81e04029c588a541466297684e9050e206294bbb69931dc14417a784b361991ef41474c8

  • SSDEEP

    3072:ZPsU8/qsNs3Ctl85gVzaSCzRTG2KAikGFyga1IJ+WJv:ZBuqqsCtWgzsmhUSJD

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1365aad1fd3ca5269a2c1018186504f5773d2d39c20c6130bdd90e12f1048d59

    • Size

      220KB

    • MD5

      1d97e20c6e5c52c23aacb8292477e78b

    • SHA1

      462c68637084abee678ccc07cce1a844fde80e4c

    • SHA256

      1365aad1fd3ca5269a2c1018186504f5773d2d39c20c6130bdd90e12f1048d59

    • SHA512

      f1cb7e7bf3e45065c2eeee8f65af3b42d8c314e90485c562506b105a81e04029c588a541466297684e9050e206294bbb69931dc14417a784b361991ef41474c8

    • SSDEEP

      3072:ZPsU8/qsNs3Ctl85gVzaSCzRTG2KAikGFyga1IJ+WJv:ZBuqqsCtWgzsmhUSJD

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks