Overview

overview

10

Static

static

f22c2462c6...5a.exe

windows7-x64

10

f22c2462c6...5a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f22c2462c6f5e6920e5619d15409742d75b395cdbc774b6fea9c3a0b2301a35a

  • Size

    100KB

  • Sample

    221202-x6mltaba4v

  • MD5

    a9ce57e0c804fd8d042f4a5ea88fd363

  • SHA1

    5c8b0e50fcc73ddc245f501c21bf2c5ea710e277

  • SHA256

    f22c2462c6f5e6920e5619d15409742d75b395cdbc774b6fea9c3a0b2301a35a

  • SHA512

    b23f0e924ef67d773bf71b2ea722e22c594f7185f6dd685e2dd270b936d2457b00a3998d9164ed9d891b72e818d46069e4817c6d0e548a67c3f03cebef929e01

  • SSDEEP

    1536:nvHi0gNigp4BNRXAEwqScgDz0Bg2PDXJRde/SwvFMYVwC+QaMnoXjLl06d:j5Y4zDfDXJVI+oo3m6d

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      f22c2462c6f5e6920e5619d15409742d75b395cdbc774b6fea9c3a0b2301a35a

    • Size

      100KB

    • MD5

      a9ce57e0c804fd8d042f4a5ea88fd363

    • SHA1

      5c8b0e50fcc73ddc245f501c21bf2c5ea710e277

    • SHA256

      f22c2462c6f5e6920e5619d15409742d75b395cdbc774b6fea9c3a0b2301a35a

    • SHA512

      b23f0e924ef67d773bf71b2ea722e22c594f7185f6dd685e2dd270b936d2457b00a3998d9164ed9d891b72e818d46069e4817c6d0e548a67c3f03cebef929e01

    • SSDEEP

      1536:nvHi0gNigp4BNRXAEwqScgDz0Bg2PDXJRde/SwvFMYVwC+QaMnoXjLl06d:j5Y4zDfDXJVI+oo3m6d

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks