Overview

overview

10

Static

static

94d9f92763...32.exe

windows7-x64

10

94d9f92763...32.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    94d9f92763e6ecb2edabaaebf6b8527a2cfebedcc967563b55b1a6653b180232

  • Size

    152KB

  • Sample

    221201-23rtksaf85

  • MD5

    c62d187096341913a6701d934afee622

  • SHA1

    589b79ae9d54650feb3cd4ff1d083beef09e9816

  • SHA256

    94d9f92763e6ecb2edabaaebf6b8527a2cfebedcc967563b55b1a6653b180232

  • SHA512

    6f381ea5dff55b05af0d2930f496807be9cb5714ec6f2f952a1df00f0de13151b2413fcb5b72e857479c5455274e2adc395bd6f0d80ab22f749143d8745d3d04

  • SSDEEP

    3072:GMGKPYYh0ZL+7DxNUbaxIcz93bOButK+Fov:2+7DxVh3bHiv

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      94d9f92763e6ecb2edabaaebf6b8527a2cfebedcc967563b55b1a6653b180232

    • Size

      152KB

    • MD5

      c62d187096341913a6701d934afee622

    • SHA1

      589b79ae9d54650feb3cd4ff1d083beef09e9816

    • SHA256

      94d9f92763e6ecb2edabaaebf6b8527a2cfebedcc967563b55b1a6653b180232

    • SHA512

      6f381ea5dff55b05af0d2930f496807be9cb5714ec6f2f952a1df00f0de13151b2413fcb5b72e857479c5455274e2adc395bd6f0d80ab22f749143d8745d3d04

    • SSDEEP

      3072:GMGKPYYh0ZL+7DxNUbaxIcz93bOButK+Fov:2+7DxVh3bHiv

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks