Overview

overview

10

Static

static

8256b692a3...65.exe

windows7-x64

10

8256b692a3...65.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8256b692a321829ebf437f3e9b97cc9676e07f3e7741853d88eb3e3c21799065

  • Size

    152KB

  • Sample

    221129-v5k1gsaf93

  • MD5

    665eebf4fe220b60f534c8b316737122

  • SHA1

    4503cca0ede799cab0dc198ad0a61c1afcadf85b

  • SHA256

    8256b692a321829ebf437f3e9b97cc9676e07f3e7741853d88eb3e3c21799065

  • SHA512

    ab88f76208288b032a3a5dfbed29281a012e6785a8965044efc0c9b64dca97a7690feb5040be7d2dff289a12c349031709f06b5f04440f1f5a1048283e4e4fea

  • SSDEEP

    3072:T0IVE1vtR13FmnmpF+CkvMnQIKAWNBlU/XBq6ci:gI61FR1OmpF+CkvMYcFci

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      8256b692a321829ebf437f3e9b97cc9676e07f3e7741853d88eb3e3c21799065

    • Size

      152KB

    • MD5

      665eebf4fe220b60f534c8b316737122

    • SHA1

      4503cca0ede799cab0dc198ad0a61c1afcadf85b

    • SHA256

      8256b692a321829ebf437f3e9b97cc9676e07f3e7741853d88eb3e3c21799065

    • SHA512

      ab88f76208288b032a3a5dfbed29281a012e6785a8965044efc0c9b64dca97a7690feb5040be7d2dff289a12c349031709f06b5f04440f1f5a1048283e4e4fea

    • SSDEEP

      3072:T0IVE1vtR13FmnmpF+CkvMnQIKAWNBlU/XBq6ci:gI61FR1OmpF+CkvMYcFci

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks