Overview

overview

10

Static

static

486d1e8a7d...00.exe

windows7-x64

10

486d1e8a7d...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    486d1e8a7d0bd85c206ca8ce71fbe5314eca5cf5d8dcac41ce88e68ba8729200

  • Size

    68KB

  • Sample

    221124-ghzngaff7x

  • MD5

    e6b99d2f00e4c19a852d9d57a6f9db1d

  • SHA1

    fd6b0c8aaf752df46f5962defc69b7b1b0b56b22

  • SHA256

    486d1e8a7d0bd85c206ca8ce71fbe5314eca5cf5d8dcac41ce88e68ba8729200

  • SHA512

    1489117cbc6eb89cbddd2872a2d68b05a7ebec5b8c9a520e4331ca29a0a8a6d55acb994f1c368069e259c025e00e1419da4155120ff51d7136e9813465625f41

  • SSDEEP

    768:Wc2liTdScAl+qOQSgFrhKo//WomvdfQXwYt1IEDIefZsK:t2IxbAcqOK3qowgnt1d

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      486d1e8a7d0bd85c206ca8ce71fbe5314eca5cf5d8dcac41ce88e68ba8729200

    • Size

      68KB

    • MD5

      e6b99d2f00e4c19a852d9d57a6f9db1d

    • SHA1

      fd6b0c8aaf752df46f5962defc69b7b1b0b56b22

    • SHA256

      486d1e8a7d0bd85c206ca8ce71fbe5314eca5cf5d8dcac41ce88e68ba8729200

    • SHA512

      1489117cbc6eb89cbddd2872a2d68b05a7ebec5b8c9a520e4331ca29a0a8a6d55acb994f1c368069e259c025e00e1419da4155120ff51d7136e9813465625f41

    • SSDEEP

      768:Wc2liTdScAl+qOQSgFrhKo//WomvdfQXwYt1IEDIefZsK:t2IxbAcqOK3qowgnt1d

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks