Overview

overview

10

Static

static

a970b932c0...70.exe

windows7-x64

10

a970b932c0...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a970b932c0d08f58bc593eee24d23fa39b9cc1b66eabee755d9087939965d170

  • Size

    156KB

  • Sample

    221202-3n3szaab2x

  • MD5

    876d3bba8a0193913b97e88e28c4503c

  • SHA1

    840d4a9b46859d52bfb0277a6a75dc4d419dbaf2

  • SHA256

    a970b932c0d08f58bc593eee24d23fa39b9cc1b66eabee755d9087939965d170

  • SHA512

    d26bec3de3a3c7be252aaf4b46e1518f131cd30f5af3fe99accc6b2037f4c8a0845b20e89709491fb094234d637f4bcdf29ab5b472cdf59c2f6ad2d22fa96bb0

  • SSDEEP

    3072:vsTNiVcx8jeFvB0Z/I8xSFJKAr2CrIL3NoF0:UpIcvqVuJfr2CML3+i

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a970b932c0d08f58bc593eee24d23fa39b9cc1b66eabee755d9087939965d170

    • Size

      156KB

    • MD5

      876d3bba8a0193913b97e88e28c4503c

    • SHA1

      840d4a9b46859d52bfb0277a6a75dc4d419dbaf2

    • SHA256

      a970b932c0d08f58bc593eee24d23fa39b9cc1b66eabee755d9087939965d170

    • SHA512

      d26bec3de3a3c7be252aaf4b46e1518f131cd30f5af3fe99accc6b2037f4c8a0845b20e89709491fb094234d637f4bcdf29ab5b472cdf59c2f6ad2d22fa96bb0

    • SSDEEP

      3072:vsTNiVcx8jeFvB0Z/I8xSFJKAr2CrIL3NoF0:UpIcvqVuJfr2CML3+i

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks