Overview

overview

10

Static

static

a45e08248c...a6.exe

windows7-x64

10

a45e08248c...a6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a45e08248c770f596dac5aaea24e1a35a31269fdcf1e528243b0e51c0417bfa6

  • Size

    212KB

  • Sample

    221129-qplvmach78

  • MD5

    f9951b4e4d4d28ccbade50834837f72f

  • SHA1

    f585ff81ba39df300b626c982402d3a6fc4b4f09

  • SHA256

    a45e08248c770f596dac5aaea24e1a35a31269fdcf1e528243b0e51c0417bfa6

  • SHA512

    27c110045e056843725ec1dec3130dbd7c00c3115648d48cd11a1a8bf4e46aaecd6a1bf567ec7ad9a7c755968cc186971e4448653ac3a5c3b5430ab9afd625c6

  • SSDEEP

    6144:KxAKwwPfOiczY09umHh7K5cUXEBwrYVHhAgY6FOk:GAbyfOxY09umH45cUXEBwUVHhAgY6ok

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a45e08248c770f596dac5aaea24e1a35a31269fdcf1e528243b0e51c0417bfa6

    • Size

      212KB

    • MD5

      f9951b4e4d4d28ccbade50834837f72f

    • SHA1

      f585ff81ba39df300b626c982402d3a6fc4b4f09

    • SHA256

      a45e08248c770f596dac5aaea24e1a35a31269fdcf1e528243b0e51c0417bfa6

    • SHA512

      27c110045e056843725ec1dec3130dbd7c00c3115648d48cd11a1a8bf4e46aaecd6a1bf567ec7ad9a7c755968cc186971e4448653ac3a5c3b5430ab9afd625c6

    • SSDEEP

      6144:KxAKwwPfOiczY09umHh7K5cUXEBwrYVHhAgY6FOk:GAbyfOxY09umH45cUXEBwUVHhAgY6ok

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks