Overview

overview

10

Static

static

91c92e35ac...1d.exe

windows7-x64

10

91c92e35ac...1d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    91c92e35ac151948eb66f357df86c117c5a5f4bea0923bbf131919e4fd30f01d

  • Size

    240KB

  • Sample

    221129-r4hbeshg37

  • MD5

    1b345cae91068f9ca12fb0602f44eb19

  • SHA1

    7581f543d0e6d628147d5305c89daaeaec537f18

  • SHA256

    91c92e35ac151948eb66f357df86c117c5a5f4bea0923bbf131919e4fd30f01d

  • SHA512

    6a155cf5bd88a10a48ef69028daf0389f1806c53a491e102846fd6c65702e5a155f6bd6d4dcad73ad50b21e9d7a2439f91335c2b98ae18084c61ad0cd9f7ede2

  • SSDEEP

    6144:ko35UtO7RQjX7XN1kd9JbSDviiopNDa/N08iY/k:e4xNMk

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      91c92e35ac151948eb66f357df86c117c5a5f4bea0923bbf131919e4fd30f01d

    • Size

      240KB

    • MD5

      1b345cae91068f9ca12fb0602f44eb19

    • SHA1

      7581f543d0e6d628147d5305c89daaeaec537f18

    • SHA256

      91c92e35ac151948eb66f357df86c117c5a5f4bea0923bbf131919e4fd30f01d

    • SHA512

      6a155cf5bd88a10a48ef69028daf0389f1806c53a491e102846fd6c65702e5a155f6bd6d4dcad73ad50b21e9d7a2439f91335c2b98ae18084c61ad0cd9f7ede2

    • SSDEEP

      6144:ko35UtO7RQjX7XN1kd9JbSDviiopNDa/N08iY/k:e4xNMk

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks