Overview

overview

10

Static

static

ebf4b411dc...49.exe

windows7-x64

10

ebf4b411dc...49.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ebf4b411dc5d29f406ce86c1a2f560b03d628582866ea59af0189a56d441d349

  • Size

    44KB

  • Sample

    221203-nn32eaag6t

  • MD5

    7c58a5a22a30066e491ab7b6b74b78f5

  • SHA1

    70b99f9c27eef94f1e6625ec635538ac0b516b86

  • SHA256

    ebf4b411dc5d29f406ce86c1a2f560b03d628582866ea59af0189a56d441d349

  • SHA512

    ce9f7ced6798756dbcd0775f3b56d043477bd3f95a02a345145478ee2cc7578e66856b47d77ac9725cae82d84bddee9843957122b0f58d57662136bfae2d3fe3

  • SSDEEP

    768:exQ1JASI6IhLGzr3UQzTGfGgcc8wi8Fx+5t8dv0Cj:exF2IQVgRyct0Cj

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      ebf4b411dc5d29f406ce86c1a2f560b03d628582866ea59af0189a56d441d349

    • Size

      44KB

    • MD5

      7c58a5a22a30066e491ab7b6b74b78f5

    • SHA1

      70b99f9c27eef94f1e6625ec635538ac0b516b86

    • SHA256

      ebf4b411dc5d29f406ce86c1a2f560b03d628582866ea59af0189a56d441d349

    • SHA512

      ce9f7ced6798756dbcd0775f3b56d043477bd3f95a02a345145478ee2cc7578e66856b47d77ac9725cae82d84bddee9843957122b0f58d57662136bfae2d3fe3

    • SSDEEP

      768:exQ1JASI6IhLGzr3UQzTGfGgcc8wi8Fx+5t8dv0Cj:exF2IQVgRyct0Cj

    Score
    10/10
    evasionpersistence

    • Modifies system executable filetype association

      persistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks