Overview

overview

10

Static

static

d9e3587009...6f.exe

windows7-x64

10

d9e3587009...6f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9e358700979fc91e7628f61361782076db6e05c162e640c95c191b23c272d6f

  • Size

    132KB

  • Sample

    221129-rwdy2aha34

  • MD5

    08d679dc862327ee4b5a9b187fab5c24

  • SHA1

    6a2e1be43f5aaed2cbc494932d9c1db68c61c3e6

  • SHA256

    d9e358700979fc91e7628f61361782076db6e05c162e640c95c191b23c272d6f

  • SHA512

    82ebd5e74ab5e0afe1e57d5427fd3abf1166e759cdaeb972a94bf2578ea667be78b3a8ea046b4c7c279df09451df431cf701f7954c4d2b59a756831819cddee6

  • SSDEEP

    3072:fanf/eF6NUf6VRlxzhPak8LXo46sBizQia8:4/UiUSVPxNPaLLXoNiiMiZ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d9e358700979fc91e7628f61361782076db6e05c162e640c95c191b23c272d6f

    • Size

      132KB

    • MD5

      08d679dc862327ee4b5a9b187fab5c24

    • SHA1

      6a2e1be43f5aaed2cbc494932d9c1db68c61c3e6

    • SHA256

      d9e358700979fc91e7628f61361782076db6e05c162e640c95c191b23c272d6f

    • SHA512

      82ebd5e74ab5e0afe1e57d5427fd3abf1166e759cdaeb972a94bf2578ea667be78b3a8ea046b4c7c279df09451df431cf701f7954c4d2b59a756831819cddee6

    • SSDEEP

      3072:fanf/eF6NUf6VRlxzhPak8LXo46sBizQia8:4/UiUSVPxNPaLLXoNiiMiZ

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks