Overview

overview

10

Static

static

892d56fccb...1e.exe

windows7-x64

10

892d56fccb...1e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    892d56fccb5f3055c31bb2cc6079e0792844f6e8e3ca7a5bd7317cfec126631e

  • Size

    284KB

  • Sample

    221202-aqqbfafa84

  • MD5

    64d99c437d950c201ab6325147be3286

  • SHA1

    1f6acc37e62abc616c3fff3177b4a9b17b1b0bea

  • SHA256

    892d56fccb5f3055c31bb2cc6079e0792844f6e8e3ca7a5bd7317cfec126631e

  • SHA512

    a2c70624ef900a3a050cb224081015c8a3f2fe87fcaed184000f41976686fa8ae43f355042e2d6898f23937c8933ac4ffac4317578584115e5bb826af0accefd

  • SSDEEP

    6144:5C1rqY3PIXKnvmb7/D26wUnfiOR7Mkg5fAAygV9rMY6xN:Y1xIXKnvmb7/D26F/7MkEfAjgV9rM9N

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      892d56fccb5f3055c31bb2cc6079e0792844f6e8e3ca7a5bd7317cfec126631e

    • Size

      284KB

    • MD5

      64d99c437d950c201ab6325147be3286

    • SHA1

      1f6acc37e62abc616c3fff3177b4a9b17b1b0bea

    • SHA256

      892d56fccb5f3055c31bb2cc6079e0792844f6e8e3ca7a5bd7317cfec126631e

    • SHA512

      a2c70624ef900a3a050cb224081015c8a3f2fe87fcaed184000f41976686fa8ae43f355042e2d6898f23937c8933ac4ffac4317578584115e5bb826af0accefd

    • SSDEEP

      6144:5C1rqY3PIXKnvmb7/D26wUnfiOR7Mkg5fAAygV9rMY6xN:Y1xIXKnvmb7/D26F/7MkEfAjgV9rM9N

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks