Overview

overview

10

Static

static

a06eaadc77...d8.exe

windows7-x64

10

a06eaadc77...d8.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a06eaadc77f65790a533788cc5bd2d7126a6d258b91faa202d5453fa925101d8

  • Size

    192KB

  • Sample

    221201-2z7qmaad88

  • MD5

    36b17309902ce828444beed0d175052c

  • SHA1

    5736e8f7092e8db767352853639381e05cd7df55

  • SHA256

    a06eaadc77f65790a533788cc5bd2d7126a6d258b91faa202d5453fa925101d8

  • SHA512

    5b2ac7224aa48e0074bc4878ae6767da70deb1ab35b26188b70245f5bdcd634469273056bd5dbb675ba43ec2e3b6a98a8d85d74d872ab3d325fcc5ffc71d9551

  • SSDEEP

    1536:FOHABQruHlT5PRi4iti93MH9iV6MRfWzzp3BHReQbIYL2XoPLJB514R9/u7rqiaW:E2QraTFRi4itiSHXzp3uYTPLJO4aW

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a06eaadc77f65790a533788cc5bd2d7126a6d258b91faa202d5453fa925101d8

    • Size

      192KB

    • MD5

      36b17309902ce828444beed0d175052c

    • SHA1

      5736e8f7092e8db767352853639381e05cd7df55

    • SHA256

      a06eaadc77f65790a533788cc5bd2d7126a6d258b91faa202d5453fa925101d8

    • SHA512

      5b2ac7224aa48e0074bc4878ae6767da70deb1ab35b26188b70245f5bdcd634469273056bd5dbb675ba43ec2e3b6a98a8d85d74d872ab3d325fcc5ffc71d9551

    • SSDEEP

      1536:FOHABQruHlT5PRi4iti93MH9iV6MRfWzzp3BHReQbIYL2XoPLJB514R9/u7rqiaW:E2QraTFRi4itiSHXzp3uYTPLJO4aW

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks