Overview

overview

10

Static

static

82d3b3fc7e...6b.exe

windows7-x64

10

82d3b3fc7e...6b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    82d3b3fc7e680c3fd90fce8ed8c112c79234434ab25f21cdec4b5aa797c7576b

  • Size

    432KB

  • Sample

    221201-hwh4bahg7y

  • MD5

    3c60a6ea610482a9612aea96e6517c95

  • SHA1

    7963db5687f8a51671e5a3f092f873897f90d6de

  • SHA256

    82d3b3fc7e680c3fd90fce8ed8c112c79234434ab25f21cdec4b5aa797c7576b

  • SHA512

    d48d2a0ae196eeaad2f14c629497c4751d54b8158dc5a03fa54bc2a930c8f810639df1e1b6a42e5353a571c0a643314dd3b817277ec2e5d65858123dfa620047

  • SSDEEP

    12288:KtlYXUZbHwqM0N9JNY4DuPwnUmct4DuPrCw:KzYXUZb/M0N9JN1DnW6Dup

Score
10/10
evasion

Malware Config

Targets

    • Target

      82d3b3fc7e680c3fd90fce8ed8c112c79234434ab25f21cdec4b5aa797c7576b

    • Size

      432KB

    • MD5

      3c60a6ea610482a9612aea96e6517c95

    • SHA1

      7963db5687f8a51671e5a3f092f873897f90d6de

    • SHA256

      82d3b3fc7e680c3fd90fce8ed8c112c79234434ab25f21cdec4b5aa797c7576b

    • SHA512

      d48d2a0ae196eeaad2f14c629497c4751d54b8158dc5a03fa54bc2a930c8f810639df1e1b6a42e5353a571c0a643314dd3b817277ec2e5d65858123dfa620047

    • SSDEEP

      12288:KtlYXUZbHwqM0N9JNY4DuPwnUmct4DuPrCw:KzYXUZb/M0N9JN1DnW6Dup

    Score
    10/10
    evasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks