Overview

overview

10

Static

static

c0bff27a48...1d.exe

windows7-x64

10

c0bff27a48...1d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c0bff27a4891f5b51d7ed8206583b619473c40376b16ed96f294c8ffbd0e341d

  • Size

    171KB

  • Sample

    221202-3bmk8adg63

  • MD5

    90d0c8ef653543c5fd37db1a5a3d0503

  • SHA1

    2281a8e206ad4919ce2eeb8425e6ec5131bf5c6b

  • SHA256

    c0bff27a4891f5b51d7ed8206583b619473c40376b16ed96f294c8ffbd0e341d

  • SHA512

    eabb585b1f9d16ebc69a7406c8561f5300387bb9bf122693e6fbbd9cf5f1f5f9bf9ad7afd9c1b6203682334a2def0db487a4deb2a7d148afdfe3a91526391bbc

  • SSDEEP

    3072:obpDCw1p3vmLvsZIaVwiwDcIbDHDCm/DE5aXbTqT:gDCwfG1bnxLEMXb2T

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c0bff27a4891f5b51d7ed8206583b619473c40376b16ed96f294c8ffbd0e341d

    • Size

      171KB

    • MD5

      90d0c8ef653543c5fd37db1a5a3d0503

    • SHA1

      2281a8e206ad4919ce2eeb8425e6ec5131bf5c6b

    • SHA256

      c0bff27a4891f5b51d7ed8206583b619473c40376b16ed96f294c8ffbd0e341d

    • SHA512

      eabb585b1f9d16ebc69a7406c8561f5300387bb9bf122693e6fbbd9cf5f1f5f9bf9ad7afd9c1b6203682334a2def0db487a4deb2a7d148afdfe3a91526391bbc

    • SSDEEP

      3072:obpDCw1p3vmLvsZIaVwiwDcIbDHDCm/DE5aXbTqT:gDCwfG1bnxLEMXb2T

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks