Overview

overview

10

Static

static

4f5cf2d4b4...df.exe

windows7-x64

10

4f5cf2d4b4...df.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4f5cf2d4b49443dcdb8db5b32adaf1f218e692866257887224a52ae39e3676df

  • Size

    100KB

  • Sample

    221128-dvzx8abb78

  • MD5

    03e9d31fe2f7b376c48b316e4b09ce3b

  • SHA1

    6dd978096e2ac309782cec308f10871bbfbf16a9

  • SHA256

    4f5cf2d4b49443dcdb8db5b32adaf1f218e692866257887224a52ae39e3676df

  • SHA512

    d90226b08f0f80c9710ba26ac72bae12453554798531e4acc195c3c32b228a72a299f6810610783404f0654b8a2249ff184ed4ed9ee0f20e2d1ca1d31a88737e

  • SSDEEP

    1536:jwWbcX220mQjVxJKIRGWcOUP7vXArnY1ZqAefzyesdNIjnZjJ:kPQjQNAfzye6CnRJ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      4f5cf2d4b49443dcdb8db5b32adaf1f218e692866257887224a52ae39e3676df

    • Size

      100KB

    • MD5

      03e9d31fe2f7b376c48b316e4b09ce3b

    • SHA1

      6dd978096e2ac309782cec308f10871bbfbf16a9

    • SHA256

      4f5cf2d4b49443dcdb8db5b32adaf1f218e692866257887224a52ae39e3676df

    • SHA512

      d90226b08f0f80c9710ba26ac72bae12453554798531e4acc195c3c32b228a72a299f6810610783404f0654b8a2249ff184ed4ed9ee0f20e2d1ca1d31a88737e

    • SSDEEP

      1536:jwWbcX220mQjVxJKIRGWcOUP7vXArnY1ZqAefzyesdNIjnZjJ:kPQjQNAfzye6CnRJ

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks