Overview

overview

10

Static

static

fdfe660e30...ed.exe

windows7-x64

10

fdfe660e30...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fdfe660e3062483bb49ce1256493b118f199723c7ca4568ee6c5101a61b04bed

  • Size

    88KB

  • Sample

    221202-a3smbsbe3w

  • MD5

    0ce849f164adaf0bedf24ed15c23e200

  • SHA1

    91a84a1ced2b5c59986a0568789a9fdd065d66bf

  • SHA256

    fdfe660e3062483bb49ce1256493b118f199723c7ca4568ee6c5101a61b04bed

  • SHA512

    2819c0ee7fb661755d7e5522acf774601a56685dbde39c9a2d3548caca0caf77c92221d4e328fe7075b4d69469d906d2ea621f2472f8e5debc2206200b557c57

  • SSDEEP

    1536:SUA8MZOEUdUsyvIyWGgXQAKkOBY5GCa4Z6wKVOFJGUzOZGX+8HxlaoBK8:u8MZAE9x4EHU4GTaoI8

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      fdfe660e3062483bb49ce1256493b118f199723c7ca4568ee6c5101a61b04bed

    • Size

      88KB

    • MD5

      0ce849f164adaf0bedf24ed15c23e200

    • SHA1

      91a84a1ced2b5c59986a0568789a9fdd065d66bf

    • SHA256

      fdfe660e3062483bb49ce1256493b118f199723c7ca4568ee6c5101a61b04bed

    • SHA512

      2819c0ee7fb661755d7e5522acf774601a56685dbde39c9a2d3548caca0caf77c92221d4e328fe7075b4d69469d906d2ea621f2472f8e5debc2206200b557c57

    • SSDEEP

      1536:SUA8MZOEUdUsyvIyWGgXQAKkOBY5GCa4Z6wKVOFJGUzOZGX+8HxlaoBK8:u8MZAE9x4EHU4GTaoI8

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks