Overview

overview

10

Static

static

4758ce7fdf...22.exe

windows7-x64

10

4758ce7fdf...22.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4758ce7fdf81da687b6cea9748f45fa3f31b5d9c11b4bc886dc389149b25c422

  • Size

    128KB

  • Sample

    221124-apxn5afa47

  • MD5

    2ab1b19ae34c99354bab69025bf5f3a0

  • SHA1

    91bc941313140c00eaead07f799f312eee5bc82d

  • SHA256

    4758ce7fdf81da687b6cea9748f45fa3f31b5d9c11b4bc886dc389149b25c422

  • SHA512

    43438cfd47f5412158e9bb5ab79bd3220bf47f4f6b3fbb19c76160253089cd9142c89b06e19e6b0e8a7e07e374ffdb1768030a27a5725af36289421beb82b7e3

  • SSDEEP

    1536:G7kkbuIXVHKTU097h9QKz7SFlc4IE3IezPoVtTqtFyUoHnkHUS65BciuJ3mnXYt:akkbugKTU0bGKXmWAojqbdBJ2It

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      4758ce7fdf81da687b6cea9748f45fa3f31b5d9c11b4bc886dc389149b25c422

    • Size

      128KB

    • MD5

      2ab1b19ae34c99354bab69025bf5f3a0

    • SHA1

      91bc941313140c00eaead07f799f312eee5bc82d

    • SHA256

      4758ce7fdf81da687b6cea9748f45fa3f31b5d9c11b4bc886dc389149b25c422

    • SHA512

      43438cfd47f5412158e9bb5ab79bd3220bf47f4f6b3fbb19c76160253089cd9142c89b06e19e6b0e8a7e07e374ffdb1768030a27a5725af36289421beb82b7e3

    • SSDEEP

      1536:G7kkbuIXVHKTU097h9QKz7SFlc4IE3IezPoVtTqtFyUoHnkHUS65BciuJ3mnXYt:akkbugKTU0bGKXmWAojqbdBJ2It

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks