Overview

overview

10

Static

static

818586f160...83.exe

windows7-x64

10

818586f160...83.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    818586f1600cf474c57c2c7d4a03d932c509172a8d1e370825caf21150146583

  • Size

    204KB

  • Sample

    221127-bqkxdsaa53

  • MD5

    85e2eb2bc495704ea090697353284b9c

  • SHA1

    ef38c6de3a022a17d6babd7d71d1133083554eb0

  • SHA256

    818586f1600cf474c57c2c7d4a03d932c509172a8d1e370825caf21150146583

  • SHA512

    f824640154da8f58eb7ada4b413c8c4aa700af21d56b7017f689c86af67cee83c7d969546d1c276197eafcd2d8e1eeb94d91dee423abd1d20077ff1ff467eef6

  • SSDEEP

    3072:aCuTo/0YxV0tQ9nLHbB9WPliBs2HWWEakGJm9QX:aC3H4QxL7B9WPli+yWWEazl

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      818586f1600cf474c57c2c7d4a03d932c509172a8d1e370825caf21150146583

    • Size

      204KB

    • MD5

      85e2eb2bc495704ea090697353284b9c

    • SHA1

      ef38c6de3a022a17d6babd7d71d1133083554eb0

    • SHA256

      818586f1600cf474c57c2c7d4a03d932c509172a8d1e370825caf21150146583

    • SHA512

      f824640154da8f58eb7ada4b413c8c4aa700af21d56b7017f689c86af67cee83c7d969546d1c276197eafcd2d8e1eeb94d91dee423abd1d20077ff1ff467eef6

    • SSDEEP

      3072:aCuTo/0YxV0tQ9nLHbB9WPliBs2HWWEakGJm9QX:aC3H4QxL7B9WPli+yWWEazl

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks