Overview

overview

10

Static

static

d0948f2f6c...9b.exe

windows7-x64

10

d0948f2f6c...9b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d0948f2f6c332500f3571b288a53d83c13e4b078516021e39f9c316ead73da9b

  • Size

    56KB

  • Sample

    221201-3rtpgach55

  • MD5

    3cd60c6c72c4f153d466f29ca2b46880

  • SHA1

    4cdda327ed6f27252d835fab9b7750e092bb046b

  • SHA256

    d0948f2f6c332500f3571b288a53d83c13e4b078516021e39f9c316ead73da9b

  • SHA512

    d3cbd6b9cd54a35d133ac62799be4fee831d255e8d5c09acd9a48262225cf2a4eab4fdc978c2df78d527959b6d18829b7e5abd364119479048aeb55e5f335f54

  • SSDEEP

    768:1ZHTpPNct8MOG0f0mq/6/Q/9NF0+LEc8af3ts0E9t:11ncjCq2oS+Ljb3ts0E9t

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d0948f2f6c332500f3571b288a53d83c13e4b078516021e39f9c316ead73da9b

    • Size

      56KB

    • MD5

      3cd60c6c72c4f153d466f29ca2b46880

    • SHA1

      4cdda327ed6f27252d835fab9b7750e092bb046b

    • SHA256

      d0948f2f6c332500f3571b288a53d83c13e4b078516021e39f9c316ead73da9b

    • SHA512

      d3cbd6b9cd54a35d133ac62799be4fee831d255e8d5c09acd9a48262225cf2a4eab4fdc978c2df78d527959b6d18829b7e5abd364119479048aeb55e5f335f54

    • SSDEEP

      768:1ZHTpPNct8MOG0f0mq/6/Q/9NF0+LEc8af3ts0E9t:11ncjCq2oS+Ljb3ts0E9t

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks