Overview

overview

8

Static

static

08e215019c...78.exe

windows7-x64

8

08e215019c...78.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    08e215019ce2af6aeae373b2080e3141f2cf00ab20e517cc282450f9bf5c5b78

  • Size

    24KB

  • Sample

    221201-hltgasde34

  • MD5

    94f57cf7725b3bf89fce2940b47cf250

  • SHA1

    610cfac034c6d672d82f17f4a48ab69758fafbd6

  • SHA256

    08e215019ce2af6aeae373b2080e3141f2cf00ab20e517cc282450f9bf5c5b78

  • SHA512

    a1f6adb6727bd9a70ced7f764ae932118b9e3760bf6d719fc96d6b426f0bba3041545258607f84b731e0d2f84d094242e0dd75f9702bb1e68502c733f6465198

  • SSDEEP

    384:kOvM2D5/eXDOwLe5eAmYaRL15Ne4fqux4SaHtBDJGegw1Ya6Rslg8cIUk979c:kOvRgXKV53ml5Ne4CsXaPDAkN6Rslggc

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      08e215019ce2af6aeae373b2080e3141f2cf00ab20e517cc282450f9bf5c5b78

    • Size

      24KB

    • MD5

      94f57cf7725b3bf89fce2940b47cf250

    • SHA1

      610cfac034c6d672d82f17f4a48ab69758fafbd6

    • SHA256

      08e215019ce2af6aeae373b2080e3141f2cf00ab20e517cc282450f9bf5c5b78

    • SHA512

      a1f6adb6727bd9a70ced7f764ae932118b9e3760bf6d719fc96d6b426f0bba3041545258607f84b731e0d2f84d094242e0dd75f9702bb1e68502c733f6465198

    • SSDEEP

      384:kOvM2D5/eXDOwLe5eAmYaRL15Ne4fqux4SaHtBDJGegw1Ya6Rslg8cIUk979c:kOvRgXKV53ml5Ne4CsXaPDAkN6Rslggc

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks