Overview

overview

10

Static

static

973c97e5bf...41.exe

windows7-x64

10

973c97e5bf...41.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    973c97e5bfe9dca2a84d7af159f68f4eaa375152d5462075c3c9985ce7d71241

  • Size

    148KB

  • Sample

    221201-22vh3sdg9v

  • MD5

    3b36af6ce4cc21a02b31d939286177a9

  • SHA1

    aec6ce21c3692a7de4368542d179f1cbdf9dbd88

  • SHA256

    973c97e5bfe9dca2a84d7af159f68f4eaa375152d5462075c3c9985ce7d71241

  • SHA512

    4e98b7704ab01c57768d563140968611b59a4f4d5d1db30c26c70e5cecceebe65a7531761b5cde50bc4965134727c8bc80969ed8f6c480aeba6b600c8ee9cda7

  • SSDEEP

    1536:5o9LXOf4BlqPAKaxnX+PBcRlouQvSPouXZ6D6Jj5wl+dwCMZUbP7VBTqJf2YhxYM:WBKalqPpM+Pco6ouZ68Kl+dnMZUb5

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      973c97e5bfe9dca2a84d7af159f68f4eaa375152d5462075c3c9985ce7d71241

    • Size

      148KB

    • MD5

      3b36af6ce4cc21a02b31d939286177a9

    • SHA1

      aec6ce21c3692a7de4368542d179f1cbdf9dbd88

    • SHA256

      973c97e5bfe9dca2a84d7af159f68f4eaa375152d5462075c3c9985ce7d71241

    • SHA512

      4e98b7704ab01c57768d563140968611b59a4f4d5d1db30c26c70e5cecceebe65a7531761b5cde50bc4965134727c8bc80969ed8f6c480aeba6b600c8ee9cda7

    • SSDEEP

      1536:5o9LXOf4BlqPAKaxnX+PBcRlouQvSPouXZ6D6Jj5wl+dwCMZUbP7VBTqJf2YhxYM:WBKalqPpM+Pco6ouZ68Kl+dnMZUb5

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks