Overview

overview

10

Static

static

10a86b05be...99.exe

windows7-x64

10

10a86b05be...99.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    10a86b05bee512591567c2e1792f4ea69d16a0e8f7fd2dfbc51e071c2025bb99

  • Size

    68KB

  • Sample

    221124-key5baed8t

  • MD5

    611ba357c1121837301b1c22c891dae5

  • SHA1

    13835b6b0d2d55e3638e9656377c354dace3e31c

  • SHA256

    10a86b05bee512591567c2e1792f4ea69d16a0e8f7fd2dfbc51e071c2025bb99

  • SHA512

    c564d224ead541e63f2a28b9d801afd455da43509525602fe9ddb9ec01c135da712fe3394eacb962a7ec14cb1fafb8a105568a4f5d292f0e1595414cceb5f9e9

  • SSDEEP

    768:wcsliTdymFAl+qOQSgFrhKo//WomvdfQXwYt1IEDIefZsK:/sIxhFAcqOK3qowgnt1d

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      10a86b05bee512591567c2e1792f4ea69d16a0e8f7fd2dfbc51e071c2025bb99

    • Size

      68KB

    • MD5

      611ba357c1121837301b1c22c891dae5

    • SHA1

      13835b6b0d2d55e3638e9656377c354dace3e31c

    • SHA256

      10a86b05bee512591567c2e1792f4ea69d16a0e8f7fd2dfbc51e071c2025bb99

    • SHA512

      c564d224ead541e63f2a28b9d801afd455da43509525602fe9ddb9ec01c135da712fe3394eacb962a7ec14cb1fafb8a105568a4f5d292f0e1595414cceb5f9e9

    • SSDEEP

      768:wcsliTdymFAl+qOQSgFrhKo//WomvdfQXwYt1IEDIefZsK:/sIxhFAcqOK3qowgnt1d

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks