Overview

overview

10

Static

static

eda12b31ad...8c.exe

windows7-x64

10

eda12b31ad...8c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    eda12b31ad1e5c27f8850258e43829957adf4999c8819b9a6d7676dbb880a78c

  • Size

    707KB

  • Sample

    221129-tv4jeaee53

  • MD5

    c93d34cb11f7781692627f9de7c088c6

  • SHA1

    af7216424a6147df8486894082d02918b8cd752a

  • SHA256

    eda12b31ad1e5c27f8850258e43829957adf4999c8819b9a6d7676dbb880a78c

  • SHA512

    f8b8e55cce3921818a360c2e3d26b41690a13056d9ad09ded536888b4631cc7385bfaf2997a2ea03e43e9159b460d5a4e64c73b902bff48c3b9aca94e8db7185

  • SSDEEP

    12288:g72bntEDW72bntEDP72bntEDW72bntED7G1y:g72zmW72zmP72zmW72zm7d

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      eda12b31ad1e5c27f8850258e43829957adf4999c8819b9a6d7676dbb880a78c

    • Size

      707KB

    • MD5

      c93d34cb11f7781692627f9de7c088c6

    • SHA1

      af7216424a6147df8486894082d02918b8cd752a

    • SHA256

      eda12b31ad1e5c27f8850258e43829957adf4999c8819b9a6d7676dbb880a78c

    • SHA512

      f8b8e55cce3921818a360c2e3d26b41690a13056d9ad09ded536888b4631cc7385bfaf2997a2ea03e43e9159b460d5a4e64c73b902bff48c3b9aca94e8db7185

    • SSDEEP

      12288:g72bntEDW72bntEDP72bntEDW72bntED7G1y:g72zmW72zmP72zmW72zm7d

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks