Overview

overview

10

Static

static

74dff4693d...ad.exe

windows7-x64

10

74dff4693d...ad.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    74dff4693deb76ab4af2bea9c02fc4986647e0fec0512d44a3738c01cb968aad

  • Size

    232KB

  • Sample

    221201-3an3nabd46

  • MD5

    599d9a0a876c7623c01c872941aa3ec9

  • SHA1

    f60870f86a8015e747c922b76c46234cbc4d737e

  • SHA256

    74dff4693deb76ab4af2bea9c02fc4986647e0fec0512d44a3738c01cb968aad

  • SHA512

    ac5ce7a156a0a48f68f3cdf04f420468765fe62cae5f0efc836bd1f8aa0e2dee3d6e0efa170a29a4140e3086494e723b8800c55de05995a122d389a1c2b845fb

  • SSDEEP

    6144:9u3PFKs7STL6eEqxF6snji81RUinKn3Kt+dNFcSt:uPhPDFco

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      74dff4693deb76ab4af2bea9c02fc4986647e0fec0512d44a3738c01cb968aad

    • Size

      232KB

    • MD5

      599d9a0a876c7623c01c872941aa3ec9

    • SHA1

      f60870f86a8015e747c922b76c46234cbc4d737e

    • SHA256

      74dff4693deb76ab4af2bea9c02fc4986647e0fec0512d44a3738c01cb968aad

    • SHA512

      ac5ce7a156a0a48f68f3cdf04f420468765fe62cae5f0efc836bd1f8aa0e2dee3d6e0efa170a29a4140e3086494e723b8800c55de05995a122d389a1c2b845fb

    • SSDEEP

      6144:9u3PFKs7STL6eEqxF6snji81RUinKn3Kt+dNFcSt:uPhPDFco

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks