Overview

overview

8

Static

static

000733f813...95.exe

windows7-x64

8

000733f813...95.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    000733f81328bc618fdc0819469cf2321b8ce46d5263cad64bf253d5bdaeee95

  • Size

    26KB

  • Sample

    221202-bjerssch3s

  • MD5

    735a27e645366bef2ddb4afc4b8944d5

  • SHA1

    6be834d0b12ec464abca1f5a6d5f091b0c905f58

  • SHA256

    000733f81328bc618fdc0819469cf2321b8ce46d5263cad64bf253d5bdaeee95

  • SHA512

    6df4b77169cbceb8b5567069785cfc97e79386526574cf6506f3b391a772e117b2c3156af0e26990552648d3528c7640bc9fa818f8fccbadd23c2ae822806b47

  • SSDEEP

    384:hOlZcAkAv59dt0mUlDh8xudtK7OZTN2W8HXVEu59uLS5U/ANpp4D0j1/ezPKKwNR:hOdv5+Dh8iK7Ud8HXVEu5TWQ15n/vOa

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      000733f81328bc618fdc0819469cf2321b8ce46d5263cad64bf253d5bdaeee95

    • Size

      26KB

    • MD5

      735a27e645366bef2ddb4afc4b8944d5

    • SHA1

      6be834d0b12ec464abca1f5a6d5f091b0c905f58

    • SHA256

      000733f81328bc618fdc0819469cf2321b8ce46d5263cad64bf253d5bdaeee95

    • SHA512

      6df4b77169cbceb8b5567069785cfc97e79386526574cf6506f3b391a772e117b2c3156af0e26990552648d3528c7640bc9fa818f8fccbadd23c2ae822806b47

    • SSDEEP

      384:hOlZcAkAv59dt0mUlDh8xudtK7OZTN2W8HXVEu59uLS5U/ANpp4D0j1/ezPKKwNR:hOdv5+Dh8iK7Ud8HXVEu5TWQ15n/vOa

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks