Overview

overview

10

Static

static

b92cf06ec0...97.exe

windows7-x64

10

b92cf06ec0...97.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b92cf06ec0aa2ea9b810d805f7d26c01ddf1032fb4b973d9a258d9557e45f897

  • Size

    220KB

  • Sample

    221124-aplxmaab7t

  • MD5

    1b0af3fe31ca05c290b244769b26eee0

  • SHA1

    fb845df634c4fc6b18a7a9949436964354944a1c

  • SHA256

    b92cf06ec0aa2ea9b810d805f7d26c01ddf1032fb4b973d9a258d9557e45f897

  • SHA512

    449c7b88ffe2bc7a9086322563cccece16b3c1438c4b4a2ad8e65c4a39bbf1a5bccb064eec8ca4d2f7521d7b0bc58fadaeb65a90bbec7a62eadb00c7651dbee5

  • SSDEEP

    3072:W6g4USylvsnv5gVzaSCz2HJzqxdJWfIBZ5qK:84USy9qgzPexdyK

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b92cf06ec0aa2ea9b810d805f7d26c01ddf1032fb4b973d9a258d9557e45f897

    • Size

      220KB

    • MD5

      1b0af3fe31ca05c290b244769b26eee0

    • SHA1

      fb845df634c4fc6b18a7a9949436964354944a1c

    • SHA256

      b92cf06ec0aa2ea9b810d805f7d26c01ddf1032fb4b973d9a258d9557e45f897

    • SHA512

      449c7b88ffe2bc7a9086322563cccece16b3c1438c4b4a2ad8e65c4a39bbf1a5bccb064eec8ca4d2f7521d7b0bc58fadaeb65a90bbec7a62eadb00c7651dbee5

    • SSDEEP

      3072:W6g4USylvsnv5gVzaSCz2HJzqxdJWfIBZ5qK:84USy9qgzPexdyK

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

1
T1158

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Hidden Files and Directories

1
T1158

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks