Overview

overview

10

Static

static

8d97961cf3...ee.exe

windows7-x64

10

8d97961cf3...ee.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8d97961cf35462f4c9c186255ed0ee9fb7e4386d54fb824c13291864aa759fee

  • Size

    80KB

  • Sample

    221129-v24y7adc5t

  • MD5

    74831dd31e5a63dcadf7be2b32f57be0

  • SHA1

    56f66dad4f6b6f40fa6a5a175170683097b4bf5a

  • SHA256

    8d97961cf35462f4c9c186255ed0ee9fb7e4386d54fb824c13291864aa759fee

  • SHA512

    378c98711afd169489a332f9b30e27e8d9d4e7f53d30197360fc4369f4e96a030d4a865d1076ddf3a6d4925f586746b732e7caabf65aa4575be148c9a6f18ed5

  • SSDEEP

    1536:7W8nvn5tPSxOmeCC9bCoCMxAwbocTzFJ0T72Vp1R:/HxnBTzFJ0T72ZR

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      8d97961cf35462f4c9c186255ed0ee9fb7e4386d54fb824c13291864aa759fee

    • Size

      80KB

    • MD5

      74831dd31e5a63dcadf7be2b32f57be0

    • SHA1

      56f66dad4f6b6f40fa6a5a175170683097b4bf5a

    • SHA256

      8d97961cf35462f4c9c186255ed0ee9fb7e4386d54fb824c13291864aa759fee

    • SHA512

      378c98711afd169489a332f9b30e27e8d9d4e7f53d30197360fc4369f4e96a030d4a865d1076ddf3a6d4925f586746b732e7caabf65aa4575be148c9a6f18ed5

    • SSDEEP

      1536:7W8nvn5tPSxOmeCC9bCoCMxAwbocTzFJ0T72Vp1R:/HxnBTzFJ0T72ZR

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks