Overview

overview

10

Static

static

926957886a...5c.exe

windows7-x64

10

926957886a...5c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    926957886ad95c2e5084776c7d2ee84daf1ce3930eafdab8138b3bf9d8edb45c

  • Size

    228KB

  • Sample

    221129-dklb3shh64

  • MD5

    2dc8df6240a9550c9b27a9a933a48d8d

  • SHA1

    c102eaa3831a098b7802125c6b0e932ad78c8dba

  • SHA256

    926957886ad95c2e5084776c7d2ee84daf1ce3930eafdab8138b3bf9d8edb45c

  • SHA512

    0608a020dc5bd449320d2b317a658df5452a2bf7accddfa7d68abe377c2116ae6bc0ece9ec467e8d12e9d531fbf3c7c4f614d435b8c4fc359768fc73478acdde

  • SSDEEP

    6144:Kmf3PFKs7aFwKWwalhrEqxF6snji81RUinKZHg/9F:KmfPhAmZIH+H

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      926957886ad95c2e5084776c7d2ee84daf1ce3930eafdab8138b3bf9d8edb45c

    • Size

      228KB

    • MD5

      2dc8df6240a9550c9b27a9a933a48d8d

    • SHA1

      c102eaa3831a098b7802125c6b0e932ad78c8dba

    • SHA256

      926957886ad95c2e5084776c7d2ee84daf1ce3930eafdab8138b3bf9d8edb45c

    • SHA512

      0608a020dc5bd449320d2b317a658df5452a2bf7accddfa7d68abe377c2116ae6bc0ece9ec467e8d12e9d531fbf3c7c4f614d435b8c4fc359768fc73478acdde

    • SSDEEP

      6144:Kmf3PFKs7aFwKWwalhrEqxF6snji81RUinKZHg/9F:KmfPhAmZIH+H

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks