Overview

overview

10

Static

static

ae653bf178...14.exe

windows7-x64

10

ae653bf178...14.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ae653bf178849524d00e8598296ca7f109e96551a93fcf05e97310b431137d14

  • Size

    285KB

  • Sample

    221202-zp78asda74

  • MD5

    8728609e88f9f8a582247665a859fa75

  • SHA1

    8bbc0fdd9db4c8df1aab5cf21b9f8623f22c871d

  • SHA256

    ae653bf178849524d00e8598296ca7f109e96551a93fcf05e97310b431137d14

  • SHA512

    383df18d17cc211852afa35fd087ddd301538295aed2a2006e9a1cae12c7139f289103ffb9cf45542bff1789ed414055e9cd354a8097e902e98f859ee8daea6a

  • SSDEEP

    6144:CZuuObR8sVImcyYIK2JogutPT50T4wmUBSLe3et1d8D/K/Xy7KU:BV+mz6rPN0TrbSLXt1SD/K/XyOU

Score
10/10
persistence

Malware Config

Targets

    • Target

      ae653bf178849524d00e8598296ca7f109e96551a93fcf05e97310b431137d14

    • Size

      285KB

    • MD5

      8728609e88f9f8a582247665a859fa75

    • SHA1

      8bbc0fdd9db4c8df1aab5cf21b9f8623f22c871d

    • SHA256

      ae653bf178849524d00e8598296ca7f109e96551a93fcf05e97310b431137d14

    • SHA512

      383df18d17cc211852afa35fd087ddd301538295aed2a2006e9a1cae12c7139f289103ffb9cf45542bff1789ed414055e9cd354a8097e902e98f859ee8daea6a

    • SSDEEP

      6144:CZuuObR8sVImcyYIK2JogutPT50T4wmUBSLe3et1d8D/K/Xy7KU:BV+mz6rPN0TrbSLXt1SD/K/XyOU

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks