Overview

overview

8

Static

static

ba5135b463...a5.exe

windows7-x64

8

ba5135b463...a5.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ba5135b46303e9ba9953afc04a0f51f9878ca0a46851224e78fad3700e1297a5

  • Size

    43KB

  • Sample

    221126-km19msab7z

  • MD5

    3d047691a4cd31f6db9d17b79e560274

  • SHA1

    ac0ebb348ec537ede322fc0f30c9542aa5b25f3a

  • SHA256

    ba5135b46303e9ba9953afc04a0f51f9878ca0a46851224e78fad3700e1297a5

  • SHA512

    60daa439b1b59647deee0605e936903f04da7e5c11348b586c68d53bdaff754420f146638e869a22408bcfcd8a53e3890f3be0d720563a486e8bc75798942d3e

  • SSDEEP

    768:9O05/8+zaBGSkMWAbDrq9OT+2I45c1r6H8jHywqvtu1iR4r103aNzwrDHCCjPkao:DMmOnMKUgK9EaYHCCrk

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      ba5135b46303e9ba9953afc04a0f51f9878ca0a46851224e78fad3700e1297a5

    • Size

      43KB

    • MD5

      3d047691a4cd31f6db9d17b79e560274

    • SHA1

      ac0ebb348ec537ede322fc0f30c9542aa5b25f3a

    • SHA256

      ba5135b46303e9ba9953afc04a0f51f9878ca0a46851224e78fad3700e1297a5

    • SHA512

      60daa439b1b59647deee0605e936903f04da7e5c11348b586c68d53bdaff754420f146638e869a22408bcfcd8a53e3890f3be0d720563a486e8bc75798942d3e

    • SSDEEP

      768:9O05/8+zaBGSkMWAbDrq9OT+2I45c1r6H8jHywqvtu1iR4r103aNzwrDHCCjPkao:DMmOnMKUgK9EaYHCCrk

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks