Overview

overview

10

Static

static

1f0940d486...77.exe

windows7-x64

10

1f0940d486...77.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1f0940d486100ee8c3598f7f2ed7d3d1f25dc2993daed1081ffead5844a62c77

  • Size

    80KB

  • Sample

    221124-aqgz3afa83

  • MD5

    35128e0afdeb32bc46ed472905196147

  • SHA1

    c64812e1d01d856a8968a20739129ea352f5b81c

  • SHA256

    1f0940d486100ee8c3598f7f2ed7d3d1f25dc2993daed1081ffead5844a62c77

  • SHA512

    4a9214b29cf6a4e5e70fe983ab2a1f3ad47ba922b39b562923778e9f584922957c02a52620bde0c439e3b281fb837f486afc365774fc82f90bde331967ebdf94

  • SSDEEP

    1536:tDwzKuOzj4i7GNetv6lTwDkJY7vyQdGV4Kj:VT+lTwDkJEDGFj

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1f0940d486100ee8c3598f7f2ed7d3d1f25dc2993daed1081ffead5844a62c77

    • Size

      80KB

    • MD5

      35128e0afdeb32bc46ed472905196147

    • SHA1

      c64812e1d01d856a8968a20739129ea352f5b81c

    • SHA256

      1f0940d486100ee8c3598f7f2ed7d3d1f25dc2993daed1081ffead5844a62c77

    • SHA512

      4a9214b29cf6a4e5e70fe983ab2a1f3ad47ba922b39b562923778e9f584922957c02a52620bde0c439e3b281fb837f486afc365774fc82f90bde331967ebdf94

    • SSDEEP

      1536:tDwzKuOzj4i7GNetv6lTwDkJY7vyQdGV4Kj:VT+lTwDkJEDGFj

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

1
T1158

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Hidden Files and Directories

1
T1158

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks