Overview

overview

10

Static

static

9134c27522...23.exe

windows7-x64

10

9134c27522...23.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9134c27522d61948c4f3a3582ac9b40c1b3a9dfd40f6770ce9e9e837518f7323

  • Size

    132KB

  • Sample

    221203-txvz2sba6x

  • MD5

    8608fc79393c73c46735d8e9891c7458

  • SHA1

    8695597a762aa40549fda39be9bb351d9da6ba80

  • SHA256

    9134c27522d61948c4f3a3582ac9b40c1b3a9dfd40f6770ce9e9e837518f7323

  • SHA512

    388863d1f74e0d927248f63a6a92f8664d09e6959f1cf7102f5fb73b839cd0133c0958054dfff9d3fd1710783dacff47b2ce5af9d356cd10c756790cc1993aee

  • SSDEEP

    1536:44xPGeTIpLXFixXVG4e2JLBJ3Ue05znybzPe9jRwo7JaS1:BGeTIpDFixFG4e1ybGtwQL

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      9134c27522d61948c4f3a3582ac9b40c1b3a9dfd40f6770ce9e9e837518f7323

    • Size

      132KB

    • MD5

      8608fc79393c73c46735d8e9891c7458

    • SHA1

      8695597a762aa40549fda39be9bb351d9da6ba80

    • SHA256

      9134c27522d61948c4f3a3582ac9b40c1b3a9dfd40f6770ce9e9e837518f7323

    • SHA512

      388863d1f74e0d927248f63a6a92f8664d09e6959f1cf7102f5fb73b839cd0133c0958054dfff9d3fd1710783dacff47b2ce5af9d356cd10c756790cc1993aee

    • SSDEEP

      1536:44xPGeTIpLXFixXVG4e2JLBJ3Ue05znybzPe9jRwo7JaS1:BGeTIpDFixFG4e1ybGtwQL

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks