Overview

overview

10

Static

static

cdb85e89a6...4a.exe

windows7-x64

10

cdb85e89a6...4a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cdb85e89a66e80d967ef3b84f51868e3de8b9228f7a3e1d832e37f910295594a

  • Size

    228KB

  • Sample

    221201-2j57vscb7v

  • MD5

    9d4c2f4363b51963ce5b1820e705ccac

  • SHA1

    c7b13919278c95326507551773be57d79df41865

  • SHA256

    cdb85e89a66e80d967ef3b84f51868e3de8b9228f7a3e1d832e37f910295594a

  • SHA512

    c49a0ec22e56674719545d7a5426bfbf0d14adb78702c260d35b389b8467c9a8feaab991675477e13b6a9afb26832fe06149490a31449f6339b9063e01bd47ca

  • SSDEEP

    3072:ifCeKOFCsv/CL0ns7bFtRdVWCyiHCN1psI6:XeRIsi1HFj/WCyiHCNfsJ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      cdb85e89a66e80d967ef3b84f51868e3de8b9228f7a3e1d832e37f910295594a

    • Size

      228KB

    • MD5

      9d4c2f4363b51963ce5b1820e705ccac

    • SHA1

      c7b13919278c95326507551773be57d79df41865

    • SHA256

      cdb85e89a66e80d967ef3b84f51868e3de8b9228f7a3e1d832e37f910295594a

    • SHA512

      c49a0ec22e56674719545d7a5426bfbf0d14adb78702c260d35b389b8467c9a8feaab991675477e13b6a9afb26832fe06149490a31449f6339b9063e01bd47ca

    • SSDEEP

      3072:ifCeKOFCsv/CL0ns7bFtRdVWCyiHCN1psI6:XeRIsi1HFj/WCyiHCNfsJ

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks