Overview

overview

10

Static

static

1d6e5af60b...01.exe

windows7-x64

10

1d6e5af60b...01.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1d6e5af60b5dbabff290faca69038fc63378168cb5c194ff79bd59af60869701

  • Size

    124KB

  • Sample

    221127-xghxbsed9z

  • MD5

    f46c42bd0d9b5c701d6cd6602ad1d7e7

  • SHA1

    dfa3101205c7a6043b808fdc1e719e285f030f6a

  • SHA256

    1d6e5af60b5dbabff290faca69038fc63378168cb5c194ff79bd59af60869701

  • SHA512

    e5c45ab462cc73d38c376e14e74601406b22f324a767a76a535bbe3db37c9d899d6ea98517b66f7c2386c83491c7a06dd6ac1793d45b19cfced2c11da149ce91

  • SSDEEP

    1536:61JQ/0aHht4JEk5KO98p+kzGDwTc6bdaR+aLCFJTZS6Gc:4baHhtCYOGDz0wwydjHFJ3j

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1d6e5af60b5dbabff290faca69038fc63378168cb5c194ff79bd59af60869701

    • Size

      124KB

    • MD5

      f46c42bd0d9b5c701d6cd6602ad1d7e7

    • SHA1

      dfa3101205c7a6043b808fdc1e719e285f030f6a

    • SHA256

      1d6e5af60b5dbabff290faca69038fc63378168cb5c194ff79bd59af60869701

    • SHA512

      e5c45ab462cc73d38c376e14e74601406b22f324a767a76a535bbe3db37c9d899d6ea98517b66f7c2386c83491c7a06dd6ac1793d45b19cfced2c11da149ce91

    • SSDEEP

      1536:61JQ/0aHht4JEk5KO98p+kzGDwTc6bdaR+aLCFJTZS6Gc:4baHhtCYOGDz0wwydjHFJ3j

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks