Overview

overview

10

Static

static

376aa33619...ff.exe

windows7-x64

10

376aa33619...ff.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    376aa336193115ba9f56635974e61363364a4d088f70c60907759eddba2d70ff

  • Size

    68KB

  • Sample

    221127-bslayadg2t

  • MD5

    725a08a285fce7cc22fc0ac84172b093

  • SHA1

    de8398c61872ef73330973e1b7d2158cca1281f7

  • SHA256

    376aa336193115ba9f56635974e61363364a4d088f70c60907759eddba2d70ff

  • SHA512

    ce2bc7c01b21e008361fca32b7f5b4fad59d1a6215b71c43a48eaf8ef2a6ec6608dc4ea191539d65598f360e78a3676531a7dd08ee75eb13b7702ad6a84b8c9e

  • SSDEEP

    768:TcvliTd+wAl+qOQSgFrhKo//WomvdfQXwYt1IEDIefZsK:YvIx/AcqOK3qowgnt1d

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      376aa336193115ba9f56635974e61363364a4d088f70c60907759eddba2d70ff

    • Size

      68KB

    • MD5

      725a08a285fce7cc22fc0ac84172b093

    • SHA1

      de8398c61872ef73330973e1b7d2158cca1281f7

    • SHA256

      376aa336193115ba9f56635974e61363364a4d088f70c60907759eddba2d70ff

    • SHA512

      ce2bc7c01b21e008361fca32b7f5b4fad59d1a6215b71c43a48eaf8ef2a6ec6608dc4ea191539d65598f360e78a3676531a7dd08ee75eb13b7702ad6a84b8c9e

    • SSDEEP

      768:TcvliTd+wAl+qOQSgFrhKo//WomvdfQXwYt1IEDIefZsK:YvIx/AcqOK3qowgnt1d

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks