Overview

overview

10

Static

static

ccca7a2743...9e.exe

windows7-x64

10

ccca7a2743...9e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ccca7a2743b20b038b8f8c96e45b0414840e50debf56b7f9a302df2258d67a9e

  • Size

    240KB

  • Sample

    221201-2kg7esha94

  • MD5

    8c51f3801012066aea0839c4293b4915

  • SHA1

    c29f6b0fcb58e5a894606f4a903bb61ef7107a6b

  • SHA256

    ccca7a2743b20b038b8f8c96e45b0414840e50debf56b7f9a302df2258d67a9e

  • SHA512

    b82d2e80934b746fbcee8f854c14fcbdba0de3e436ea6a78a16302d033279d8c9fee9cb3c7478d8bd342f65235b94c108048cf861ff15b42beb4039cf5b2db0d

  • SSDEEP

    6144:NH3dwqsNTNEXGlQR58EqxF6snji81RUinKq3aEESliD0z:NXdQKjeaEEpE

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      ccca7a2743b20b038b8f8c96e45b0414840e50debf56b7f9a302df2258d67a9e

    • Size

      240KB

    • MD5

      8c51f3801012066aea0839c4293b4915

    • SHA1

      c29f6b0fcb58e5a894606f4a903bb61ef7107a6b

    • SHA256

      ccca7a2743b20b038b8f8c96e45b0414840e50debf56b7f9a302df2258d67a9e

    • SHA512

      b82d2e80934b746fbcee8f854c14fcbdba0de3e436ea6a78a16302d033279d8c9fee9cb3c7478d8bd342f65235b94c108048cf861ff15b42beb4039cf5b2db0d

    • SSDEEP

      6144:NH3dwqsNTNEXGlQR58EqxF6snji81RUinKq3aEESliD0z:NXdQKjeaEEpE

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks