Overview

overview

8

Static

static

07620c35c6...df.exe

windows7-x64

8

07620c35c6...df.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    07620c35c632e3efdea1a6c27eed8c34c0784733a6217b7de67ee0a0e65156df

  • Size

    161KB

  • Sample

    221125-fzlmhadd55

  • MD5

    cdca5c2f6adee7877267a484e678129d

  • SHA1

    fea0976eda49d5bb5705e88b5ea644e7bc2ba6fc

  • SHA256

    07620c35c632e3efdea1a6c27eed8c34c0784733a6217b7de67ee0a0e65156df

  • SHA512

    4d8a16077417a1ae254d9389dd64f860a7bb39456d93691af8a3f69ab24d08c1e0ec2d14a812977e94d637f1bbf080f8c4a9eeecef9f07d536345bf27a8c95bb

  • SSDEEP

    3072:XzdPwJi53LPVGzvLrzlVtxJXvZP/+1UtgfMUNepZ3E3+E1rLsiXGYEvoz:XVQilLPVGTLrJDxBZ+uoMaco+EJsi

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      07620c35c632e3efdea1a6c27eed8c34c0784733a6217b7de67ee0a0e65156df

    • Size

      161KB

    • MD5

      cdca5c2f6adee7877267a484e678129d

    • SHA1

      fea0976eda49d5bb5705e88b5ea644e7bc2ba6fc

    • SHA256

      07620c35c632e3efdea1a6c27eed8c34c0784733a6217b7de67ee0a0e65156df

    • SHA512

      4d8a16077417a1ae254d9389dd64f860a7bb39456d93691af8a3f69ab24d08c1e0ec2d14a812977e94d637f1bbf080f8c4a9eeecef9f07d536345bf27a8c95bb

    • SSDEEP

      3072:XzdPwJi53LPVGzvLrzlVtxJXvZP/+1UtgfMUNepZ3E3+E1rLsiXGYEvoz:XVQilLPVGTLrJDxBZ+uoMaco+EJsi

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks