Overview

overview

10

Static

static

443899e0c8...ea.exe

windows7-x64

10

443899e0c8...ea.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    443899e0c8d0a8210af07c603007eea45727b8eae2d379af1793612c2d5b22ea

  • Size

    104KB

  • Sample

    221202-x7lqxabb31

  • MD5

    97d6f0dcb35011881487165e19b5d783

  • SHA1

    21d275ff4cbc572fecfe241fbcad32f6fcded14b

  • SHA256

    443899e0c8d0a8210af07c603007eea45727b8eae2d379af1793612c2d5b22ea

  • SHA512

    eaad230bf374abee146fde4749b697e47d3bfb100121f63f21ae5daedf05060738e1eb1cee4134415d956ed9273486eb80f5f72f5a407d32a8d0ba22a94dcbeb

  • SSDEEP

    1536:bh5ifEI9HScK4msKerjwJ8AOsNNk2HJQNsMj3i6E3j:N5ifEI9qRsKFvHKN/Oj

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      443899e0c8d0a8210af07c603007eea45727b8eae2d379af1793612c2d5b22ea

    • Size

      104KB

    • MD5

      97d6f0dcb35011881487165e19b5d783

    • SHA1

      21d275ff4cbc572fecfe241fbcad32f6fcded14b

    • SHA256

      443899e0c8d0a8210af07c603007eea45727b8eae2d379af1793612c2d5b22ea

    • SHA512

      eaad230bf374abee146fde4749b697e47d3bfb100121f63f21ae5daedf05060738e1eb1cee4134415d956ed9273486eb80f5f72f5a407d32a8d0ba22a94dcbeb

    • SSDEEP

      1536:bh5ifEI9HScK4msKerjwJ8AOsNNk2HJQNsMj3i6E3j:N5ifEI9qRsKFvHKN/Oj

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks