Overview

overview

8

Static

static

83012b04e0...28.exe

windows7-x64

8

83012b04e0...28.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    83012b04e0709e478266bded08053a7230f6fe8477f75bd4f19667496c655728

  • Size

    126KB

  • Sample

    221201-12nvvsfc45

  • MD5

    e537368b24504594056b2461d2d0d2de

  • SHA1

    b968eefe6f56e1470369f9042262206ae5710b06

  • SHA256

    83012b04e0709e478266bded08053a7230f6fe8477f75bd4f19667496c655728

  • SHA512

    bde8790b362d0164a8261b9ec117830cc5f72a7684b5aeb360f0e80cf58ad74ace7485e78e693407a3136f07d42465f0fc45fb27c112c3ddd3999d545de0f136

  • SSDEEP

    3072:CQ7seRB+b++1Aw+y4YgDSAEBP/lxJ93i+FrGNKo:CQ7seRB+b++1Aw+y4YgDSAEZ/lf9kN

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      83012b04e0709e478266bded08053a7230f6fe8477f75bd4f19667496c655728

    • Size

      126KB

    • MD5

      e537368b24504594056b2461d2d0d2de

    • SHA1

      b968eefe6f56e1470369f9042262206ae5710b06

    • SHA256

      83012b04e0709e478266bded08053a7230f6fe8477f75bd4f19667496c655728

    • SHA512

      bde8790b362d0164a8261b9ec117830cc5f72a7684b5aeb360f0e80cf58ad74ace7485e78e693407a3136f07d42465f0fc45fb27c112c3ddd3999d545de0f136

    • SSDEEP

      3072:CQ7seRB+b++1Aw+y4YgDSAEBP/lxJ93i+FrGNKo:CQ7seRB+b++1Aw+y4YgDSAEZ/lf9kN

    Score
    8/10
    evasionpersistence

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Stops running service(s)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks