Overview

overview

10

Static

static

6cee614c70...09.exe

windows7-x64

10

6cee614c70...09.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6cee614c703023525b76f01c340c93d0cbe3f5c1a96d8f03162de9ec476cd609

  • Size

    264KB

  • Sample

    221202-acrx4shc3w

  • MD5

    5a6d420e0c900902da84a5bcdf81be2d

  • SHA1

    a9f7077256c0b0871b78e0f7b034d6c6ce31a5b7

  • SHA256

    6cee614c703023525b76f01c340c93d0cbe3f5c1a96d8f03162de9ec476cd609

  • SHA512

    01eeca266e41586d46215bf1d0615bd29fe124745782405112986e9888ba48a1d18326eaedae9346af227db8afd1fbc78badfd3a6bbf8851709fd079f7b319bb

  • SSDEEP

    6144:P3ziWjxSBE1OmsTluVPHOGiaE9pCvT0BFv:P1xSBE1OmsTluVliaxuv

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      6cee614c703023525b76f01c340c93d0cbe3f5c1a96d8f03162de9ec476cd609

    • Size

      264KB

    • MD5

      5a6d420e0c900902da84a5bcdf81be2d

    • SHA1

      a9f7077256c0b0871b78e0f7b034d6c6ce31a5b7

    • SHA256

      6cee614c703023525b76f01c340c93d0cbe3f5c1a96d8f03162de9ec476cd609

    • SHA512

      01eeca266e41586d46215bf1d0615bd29fe124745782405112986e9888ba48a1d18326eaedae9346af227db8afd1fbc78badfd3a6bbf8851709fd079f7b319bb

    • SSDEEP

      6144:P3ziWjxSBE1OmsTluVPHOGiaE9pCvT0BFv:P1xSBE1OmsTluVliaxuv

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks