Overview

overview

10

Static

static

d069dd9131...01.exe

windows7-x64

10

d069dd9131...01.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d069dd9131c88ada8d181390d78594313cd7b5388b3b565bb391f601353c6a01

  • Size

    160KB

  • Sample

    221124-aqhllaac3y

  • MD5

    3523d9fc43d6e2636c3fd522694a4c29

  • SHA1

    2476d100d56d382d64f511efb0d7ff2b0aa8b82b

  • SHA256

    d069dd9131c88ada8d181390d78594313cd7b5388b3b565bb391f601353c6a01

  • SHA512

    3f5b542cc2a6ab536ef23c7e18484ebc9a8e6dd78566c343e04a5f629dd3cb27be732da62db9a01c768b90fe84455b658b4dff077b1178ab834962001285da1f

  • SSDEEP

    1536:yCEFY1w9tkprlMsxCimXImsXkNFZUOCMq5ELEDkLfdjcbZOshVtIZklp:TPi9tupMsxC2VXyrUnMqUx6hVp

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d069dd9131c88ada8d181390d78594313cd7b5388b3b565bb391f601353c6a01

    • Size

      160KB

    • MD5

      3523d9fc43d6e2636c3fd522694a4c29

    • SHA1

      2476d100d56d382d64f511efb0d7ff2b0aa8b82b

    • SHA256

      d069dd9131c88ada8d181390d78594313cd7b5388b3b565bb391f601353c6a01

    • SHA512

      3f5b542cc2a6ab536ef23c7e18484ebc9a8e6dd78566c343e04a5f629dd3cb27be732da62db9a01c768b90fe84455b658b4dff077b1178ab834962001285da1f

    • SSDEEP

      1536:yCEFY1w9tkprlMsxCimXImsXkNFZUOCMq5ELEDkLfdjcbZOshVtIZklp:TPi9tupMsxC2VXyrUnMqUx6hVp

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks