Overview

overview

10

Static

static

aa44797ae1...f4.exe

windows7-x64

10

aa44797ae1...f4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa44797ae10ad878cd50ae60d7688a7f579c221cc1b5fadcf047abdf7acc3ef4

  • Size

    208KB

  • Sample

    221201-2xdprsab69

  • MD5

    66be6aa49cf48dbea19416a99b8cd5eb

  • SHA1

    0e4e14b2a7ffae8bbad8243c26d5debe07eb9e96

  • SHA256

    aa44797ae10ad878cd50ae60d7688a7f579c221cc1b5fadcf047abdf7acc3ef4

  • SHA512

    ff209533179df4875380e4c34fd093df5dd0f7ddae4d7415b4642638d00a779fa05c6ef2a363b3b8e7b1d1ed0966e150222a8d54035357b24724703fff7ed74c

  • SSDEEP

    3072:TDMM1GyDaM979aAqvxpDWDhQx9AhHp8NeqxEN1yy8p+uxM/T:T5GSoA8pDqQx9AhJSRxiJ8j+/T

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      aa44797ae10ad878cd50ae60d7688a7f579c221cc1b5fadcf047abdf7acc3ef4

    • Size

      208KB

    • MD5

      66be6aa49cf48dbea19416a99b8cd5eb

    • SHA1

      0e4e14b2a7ffae8bbad8243c26d5debe07eb9e96

    • SHA256

      aa44797ae10ad878cd50ae60d7688a7f579c221cc1b5fadcf047abdf7acc3ef4

    • SHA512

      ff209533179df4875380e4c34fd093df5dd0f7ddae4d7415b4642638d00a779fa05c6ef2a363b3b8e7b1d1ed0966e150222a8d54035357b24724703fff7ed74c

    • SSDEEP

      3072:TDMM1GyDaM979aAqvxpDWDhQx9AhHp8NeqxEN1yy8p+uxM/T:T5GSoA8pDqQx9AhJSRxiJ8j+/T

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks