Overview

overview

8

Static

static

20e4e4ee0d...67.exe

windows7-x64

8

20e4e4ee0d...67.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    20e4e4ee0d5143113cbf8e42ed8dbf81010cb236dfb6efbddf0bb7a7f8fb1d67

  • Size

    3.3MB

  • Sample

    221128-e4lbvsag5y

  • MD5

    837ef43a00c99955f3559639f9cee2d0

  • SHA1

    6a9dde23ba2e139d7a106aa77e55d857e921fb15

  • SHA256

    20e4e4ee0d5143113cbf8e42ed8dbf81010cb236dfb6efbddf0bb7a7f8fb1d67

  • SHA512

    edb107d1e72a906f99c1e2d17be507a0525b5a224afaa6f70692539c5d1006bdecbbc786e4ebafab0bcf3fc8c93cf3851fad4f6b027bf20a0ffd75ec9f8bbe4b

  • SSDEEP

    98304:/3YobVRxj94j/JpY6A7PFLiWg5RxjUZza:/YeujnY6aIrYZ2

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      20e4e4ee0d5143113cbf8e42ed8dbf81010cb236dfb6efbddf0bb7a7f8fb1d67

    • Size

      3.3MB

    • MD5

      837ef43a00c99955f3559639f9cee2d0

    • SHA1

      6a9dde23ba2e139d7a106aa77e55d857e921fb15

    • SHA256

      20e4e4ee0d5143113cbf8e42ed8dbf81010cb236dfb6efbddf0bb7a7f8fb1d67

    • SHA512

      edb107d1e72a906f99c1e2d17be507a0525b5a224afaa6f70692539c5d1006bdecbbc786e4ebafab0bcf3fc8c93cf3851fad4f6b027bf20a0ffd75ec9f8bbe4b

    • SSDEEP

      98304:/3YobVRxj94j/JpY6A7PFLiWg5RxjUZza:/YeujnY6aIrYZ2

    Score
    8/10
    discoverypersistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks