Overview

overview

10

Static

static

bc8b419793...6a.exe

windows7-x64

10

bc8b419793...6a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bc8b419793b3ccc0ef565ba7e0b5e95724a9590cc1578f351b9439d39e72116a

  • Size

    252KB

  • Sample

    221129-dldcvsde31

  • MD5

    6127dd2c32d06962240c1d69ca0c09ad

  • SHA1

    b963586df5096f0af20c306aca0267b544ccced2

  • SHA256

    bc8b419793b3ccc0ef565ba7e0b5e95724a9590cc1578f351b9439d39e72116a

  • SHA512

    688236c9c03d1df31c3bd4bf2e5e5b54ea76d634af0812c26022e676bb352b5c00a7d7ecfce6a95ed02a81741ac339ebb4d54bc4a8129cf8636251f9036697e1

  • SSDEEP

    3072:1rAckx7LaXsWvZ0OgRqTAJcLGGO/xuiEyJeOOeGs5oxnkNzQKWx0:1rLFx/ZLA4PmG6d

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      bc8b419793b3ccc0ef565ba7e0b5e95724a9590cc1578f351b9439d39e72116a

    • Size

      252KB

    • MD5

      6127dd2c32d06962240c1d69ca0c09ad

    • SHA1

      b963586df5096f0af20c306aca0267b544ccced2

    • SHA256

      bc8b419793b3ccc0ef565ba7e0b5e95724a9590cc1578f351b9439d39e72116a

    • SHA512

      688236c9c03d1df31c3bd4bf2e5e5b54ea76d634af0812c26022e676bb352b5c00a7d7ecfce6a95ed02a81741ac339ebb4d54bc4a8129cf8636251f9036697e1

    • SSDEEP

      3072:1rAckx7LaXsWvZ0OgRqTAJcLGGO/xuiEyJeOOeGs5oxnkNzQKWx0:1rLFx/ZLA4PmG6d

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks