Overview

overview

10

Static

static

b2b027eea9...ac.exe

windows7-x64

10

b2b027eea9...ac.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b2b027eea9bcd57b0f061ac5c9d7323936873fdf034acc657d308a1d2bd11fac

  • Size

    100KB

  • Sample

    221202-x63yssfe99

  • MD5

    57eb96e4b8686d53ce53086697513fce

  • SHA1

    9f51c844c2c51c08f74bbba609ded01091d2f975

  • SHA256

    b2b027eea9bcd57b0f061ac5c9d7323936873fdf034acc657d308a1d2bd11fac

  • SHA512

    a51c5cdffc5993088c16212482e3c5ddeb0fec69ca1d2226d40c6894ef4517515153932c74752bbf27bd87bed42021c6b8678c09618d686b61f3f90eebee4845

  • SSDEEP

    1536:6zS5c/73Zp4BNRXAEwqScgDz0Bg2PDXJRde/S9FMYVwt+QaMcoXjLl0Gi:KP4zDfDXJVa+vo3mGi

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b2b027eea9bcd57b0f061ac5c9d7323936873fdf034acc657d308a1d2bd11fac

    • Size

      100KB

    • MD5

      57eb96e4b8686d53ce53086697513fce

    • SHA1

      9f51c844c2c51c08f74bbba609ded01091d2f975

    • SHA256

      b2b027eea9bcd57b0f061ac5c9d7323936873fdf034acc657d308a1d2bd11fac

    • SHA512

      a51c5cdffc5993088c16212482e3c5ddeb0fec69ca1d2226d40c6894ef4517515153932c74752bbf27bd87bed42021c6b8678c09618d686b61f3f90eebee4845

    • SSDEEP

      1536:6zS5c/73Zp4BNRXAEwqScgDz0Bg2PDXJRde/S9FMYVwt+QaMcoXjLl0Gi:KP4zDfDXJVa+vo3mGi

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks