Overview

overview

10

Static

static

dd6bc7d187...a9.exe

windows7-x64

10

dd6bc7d187...a9.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dd6bc7d187cff1e2bda79ed44a68583a7e2df837891aa41cbbc98ccf3ad37ea9

  • Size

    232KB

  • Sample

    221201-2gfjesbh31

  • MD5

    634b19d6ce073a71634c83691d0e8a5e

  • SHA1

    15e5eea84cd5db35adbea33e4958b6cb10d16c1e

  • SHA256

    dd6bc7d187cff1e2bda79ed44a68583a7e2df837891aa41cbbc98ccf3ad37ea9

  • SHA512

    38f2cdee9bb62a05df93e7ec23fb2360291e99d47f625f81b533aca3348b64e85dc922873681b0df0d9e61f825cdcf4c67a21813cf033673771bb29d934c3af1

  • SSDEEP

    6144:R3PFKs7diixRSFBfWEqxF6snji81RUinK51jbkxkubS0:dPhJuBXVbkxJb1

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      dd6bc7d187cff1e2bda79ed44a68583a7e2df837891aa41cbbc98ccf3ad37ea9

    • Size

      232KB

    • MD5

      634b19d6ce073a71634c83691d0e8a5e

    • SHA1

      15e5eea84cd5db35adbea33e4958b6cb10d16c1e

    • SHA256

      dd6bc7d187cff1e2bda79ed44a68583a7e2df837891aa41cbbc98ccf3ad37ea9

    • SHA512

      38f2cdee9bb62a05df93e7ec23fb2360291e99d47f625f81b533aca3348b64e85dc922873681b0df0d9e61f825cdcf4c67a21813cf033673771bb29d934c3af1

    • SSDEEP

      6144:R3PFKs7diixRSFBfWEqxF6snji81RUinK51jbkxkubS0:dPhJuBXVbkxJb1

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks