Overview

overview

10

Static

static

88d67fa260...9c.exe

windows7-x64

10

88d67fa260...9c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    88d67fa2601c5fa33a30bfdea104f964821cb4d605657de932cd01de6a6c8b9c

  • Size

    192KB

  • Sample

    221201-254k6aeb4v

  • MD5

    a8dd33d459be774b2e567beea8e8d96d

  • SHA1

    bc5f66ba89c2c1ef0167c4695e2eba28782ab7f4

  • SHA256

    88d67fa2601c5fa33a30bfdea104f964821cb4d605657de932cd01de6a6c8b9c

  • SHA512

    8c54c1b897b4a610806430eb45fb4c1c728578e8cd782edf32b6d4e3c012a51f13f2863408b97a16202250aa15ea43d4457d281df899c2b026c9489875c74146

  • SSDEEP

    1536:h6HABQruHlTYrPRi4iti93MH9iV6MRfWzzp3BHReQbIYL2XoPLJB514R9/dJqi/7:w2QraT0Ri4itiSHXzp3uYTPLJOhD

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      88d67fa2601c5fa33a30bfdea104f964821cb4d605657de932cd01de6a6c8b9c

    • Size

      192KB

    • MD5

      a8dd33d459be774b2e567beea8e8d96d

    • SHA1

      bc5f66ba89c2c1ef0167c4695e2eba28782ab7f4

    • SHA256

      88d67fa2601c5fa33a30bfdea104f964821cb4d605657de932cd01de6a6c8b9c

    • SHA512

      8c54c1b897b4a610806430eb45fb4c1c728578e8cd782edf32b6d4e3c012a51f13f2863408b97a16202250aa15ea43d4457d281df899c2b026c9489875c74146

    • SSDEEP

      1536:h6HABQruHlTYrPRi4iti93MH9iV6MRfWzzp3BHReQbIYL2XoPLJB514R9/dJqi/7:w2QraT0Ri4itiSHXzp3uYTPLJOhD

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks