Overview

overview

10

Static

static

5c70ea5abc...57.exe

windows7-x64

10

5c70ea5abc...57.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5c70ea5abce68ee05eaeafdd7bca4cd535024f79c143ea1df83b99e6d08feb57

  • Size

    156KB

  • Sample

    221201-3vae1adb49

  • MD5

    085229e202e2dd247fc008a3024e3627

  • SHA1

    5e0e6f1cb26fcebf1727a599c480e5702ea4f473

  • SHA256

    5c70ea5abce68ee05eaeafdd7bca4cd535024f79c143ea1df83b99e6d08feb57

  • SHA512

    f2ee5dcd9dbc445af9c62026d8ea293c968e00292e392ee735bba2410d4e6fc7bc2ebcaf0ac92409f4dddd03c5f97ce6943bb5f577eed200386474693145232b

  • SSDEEP

    3072:QBd15E2MtU7Qv0w4ZRRQMMDwtIMCeFP4ANA4oQZiEMnL:SdnE2R7Qvb4tQTaCeFP4A+WqL

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      5c70ea5abce68ee05eaeafdd7bca4cd535024f79c143ea1df83b99e6d08feb57

    • Size

      156KB

    • MD5

      085229e202e2dd247fc008a3024e3627

    • SHA1

      5e0e6f1cb26fcebf1727a599c480e5702ea4f473

    • SHA256

      5c70ea5abce68ee05eaeafdd7bca4cd535024f79c143ea1df83b99e6d08feb57

    • SHA512

      f2ee5dcd9dbc445af9c62026d8ea293c968e00292e392ee735bba2410d4e6fc7bc2ebcaf0ac92409f4dddd03c5f97ce6943bb5f577eed200386474693145232b

    • SSDEEP

      3072:QBd15E2MtU7Qv0w4ZRRQMMDwtIMCeFP4ANA4oQZiEMnL:SdnE2R7Qvb4tQTaCeFP4A+WqL

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks