Overview

overview

10

Static

static

838e13025c...4c.exe

windows7-x64

10

838e13025c...4c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    838e13025c700837668dbda2dee01cdee2f6e8c269d9aaab70891fb51548354c

  • Size

    88KB

  • Sample

    221202-a3xw2sbe4z

  • MD5

    591b338f34ccef00f55bb774dc344b0c

  • SHA1

    f9d4cb1cde8c111270ed4f302a20ac3014174dce

  • SHA256

    838e13025c700837668dbda2dee01cdee2f6e8c269d9aaab70891fb51548354c

  • SHA512

    784f5b6c9250106253d543e748a23d05aa4d6f06e5dd4f729b3b4f969c7ea073af06736d948dfb0b7153eaff5bbb684d898f3d268dd87ac9a24a03cc091bcc7b

  • SSDEEP

    1536:6Yd4NJxM4uGR88FXaIj3mmpQxAwHz1qQU37bmxzzYj8pizy4LTV6vDmNmo1GP:ySJ8FXacWmpQxAwHz1qQGfmxzzYj8pi+

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      838e13025c700837668dbda2dee01cdee2f6e8c269d9aaab70891fb51548354c

    • Size

      88KB

    • MD5

      591b338f34ccef00f55bb774dc344b0c

    • SHA1

      f9d4cb1cde8c111270ed4f302a20ac3014174dce

    • SHA256

      838e13025c700837668dbda2dee01cdee2f6e8c269d9aaab70891fb51548354c

    • SHA512

      784f5b6c9250106253d543e748a23d05aa4d6f06e5dd4f729b3b4f969c7ea073af06736d948dfb0b7153eaff5bbb684d898f3d268dd87ac9a24a03cc091bcc7b

    • SSDEEP

      1536:6Yd4NJxM4uGR88FXaIj3mmpQxAwHz1qQU37bmxzzYj8pizy4LTV6vDmNmo1GP:ySJ8FXacWmpQxAwHz1qQGfmxzzYj8pi+

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks