Overview

overview

10

Static

static

0fbb4dfbdd...40.exe

windows7-x64

10

0fbb4dfbdd...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0fbb4dfbdd3331fe9058eac918fa124bb484198f76f84eb88d46e54dd960f940

  • Size

    104KB

  • Sample

    221124-aps1yaab8t

  • MD5

    2a12ac1763c8855aad9dc8df5d36ad08

  • SHA1

    26b7e0777a2618958ae86b32fc6fb67851266745

  • SHA256

    0fbb4dfbdd3331fe9058eac918fa124bb484198f76f84eb88d46e54dd960f940

  • SHA512

    8654c5da621c967650c5ed2d8fef65a244766d744ff7e43860e394450fe94118f1309ec0b50b961c9956842d05f5b1b26e06d9b0714b0b9e985ce78b0f1a01f5

  • SSDEEP

    1536:3chvr9fgc14ieh6hC3KwTHlyHcw1rqVjSxakAyBGss7oJd:shTlgc1lehWwTHlyHBQNSxZs7

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0fbb4dfbdd3331fe9058eac918fa124bb484198f76f84eb88d46e54dd960f940

    • Size

      104KB

    • MD5

      2a12ac1763c8855aad9dc8df5d36ad08

    • SHA1

      26b7e0777a2618958ae86b32fc6fb67851266745

    • SHA256

      0fbb4dfbdd3331fe9058eac918fa124bb484198f76f84eb88d46e54dd960f940

    • SHA512

      8654c5da621c967650c5ed2d8fef65a244766d744ff7e43860e394450fe94118f1309ec0b50b961c9956842d05f5b1b26e06d9b0714b0b9e985ce78b0f1a01f5

    • SSDEEP

      1536:3chvr9fgc14ieh6hC3KwTHlyHcw1rqVjSxakAyBGss7oJd:shTlgc1lehWwTHlyHBQNSxZs7

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks