Overview

overview

10

Static

static

cb3396b9b9...fc.exe

windows7-x64

10

cb3396b9b9...fc.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cb3396b9b9f7f5869fb81d50a73e123a08c0ae17d2c4591a726fa210a984fefc

  • Size

    166KB

  • Sample

    221202-3bb5gsgh6z

  • MD5

    d64fa99d2a140d4b61e789aa92300ee5

  • SHA1

    185fb46412606d593bdef665c272e0665cedd85a

  • SHA256

    cb3396b9b9f7f5869fb81d50a73e123a08c0ae17d2c4591a726fa210a984fefc

  • SHA512

    39eb81ea533f905d572f69ce0477ccf7cb2e43723eaac53509ee45148bdcfae5369830d4637d2530977458b4894d2b1e7a0de5ffa7a125845a53994455ad56d0

  • SSDEEP

    3072:obpDCw1p3vmLvsZIaVwiwDcIbDHDCm/DEcOOb:gDCwfG1bnxLEcOu

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      cb3396b9b9f7f5869fb81d50a73e123a08c0ae17d2c4591a726fa210a984fefc

    • Size

      166KB

    • MD5

      d64fa99d2a140d4b61e789aa92300ee5

    • SHA1

      185fb46412606d593bdef665c272e0665cedd85a

    • SHA256

      cb3396b9b9f7f5869fb81d50a73e123a08c0ae17d2c4591a726fa210a984fefc

    • SHA512

      39eb81ea533f905d572f69ce0477ccf7cb2e43723eaac53509ee45148bdcfae5369830d4637d2530977458b4894d2b1e7a0de5ffa7a125845a53994455ad56d0

    • SSDEEP

      3072:obpDCw1p3vmLvsZIaVwiwDcIbDHDCm/DEcOOb:gDCwfG1bnxLEcOu

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks