Overview

overview

10

Static

static

828c0464e3...5a.exe

windows7-x64

10

828c0464e3...5a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    828c0464e39c8e1f5d1b67d42502252db0d160b10d3ecf8af48d3a9874e48e5a

  • Size

    184KB

  • Sample

    221201-27zpzsbb29

  • MD5

    7cb5ba49428f8bc264712b75bc2943d2

  • SHA1

    7e47af74528ac0b3a2c0f3ca42c5945a3c067050

  • SHA256

    828c0464e39c8e1f5d1b67d42502252db0d160b10d3ecf8af48d3a9874e48e5a

  • SHA512

    43e2219803225ef9476c999380e6be70c864a4e1f06a008f36865c7883f4c9b617847c23c3342dc6d623d7124ce4f80c50b25065f4c84755152c71cd0e8e8b49

  • SSDEEP

    3072:2ZZJz0/29lYqldrXAHDnP8jmvZMy1Jy3b33akhGudahvyMjy5cI8dZLYVjg:Uh0/29tZ0P8jmBry3L9oYVs

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      828c0464e39c8e1f5d1b67d42502252db0d160b10d3ecf8af48d3a9874e48e5a

    • Size

      184KB

    • MD5

      7cb5ba49428f8bc264712b75bc2943d2

    • SHA1

      7e47af74528ac0b3a2c0f3ca42c5945a3c067050

    • SHA256

      828c0464e39c8e1f5d1b67d42502252db0d160b10d3ecf8af48d3a9874e48e5a

    • SHA512

      43e2219803225ef9476c999380e6be70c864a4e1f06a008f36865c7883f4c9b617847c23c3342dc6d623d7124ce4f80c50b25065f4c84755152c71cd0e8e8b49

    • SSDEEP

      3072:2ZZJz0/29lYqldrXAHDnP8jmvZMy1Jy3b33akhGudahvyMjy5cI8dZLYVjg:Uh0/29tZ0P8jmBry3L9oYVs

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks