Overview

overview

8

Static

static

a9e74052fe...02.exe

windows7-x64

8

a9e74052fe...02.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    a9e74052fe1819723eb9d307a7b5a3a227e956c42c79067c727511a6fde96102

  • Size

    1.7MB

  • Sample

    221203-w3z73aea54

  • MD5

    f3eb26f9282b9e1c42d4215f5b0dce62

  • SHA1

    4a5b446204693e0efc9b3edfae06b1c9ad6a0865

  • SHA256

    a9e74052fe1819723eb9d307a7b5a3a227e956c42c79067c727511a6fde96102

  • SHA512

    26818a450d479f08de52efd1ae291d1f9aabba4181ed1bb2d552e4c20de6f2c3bad69f0d1b29bd2d4b33a031833daf61ab82a01ab9903996e97182a52c853cec

  • SSDEEP

    12288:w3QyecmYq7i/49rbX4xDYifr3QyecmYq7i/49rbX4xDYifn:7taSrbxtaSrb4

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      a9e74052fe1819723eb9d307a7b5a3a227e956c42c79067c727511a6fde96102

    • Size

      1.7MB

    • MD5

      f3eb26f9282b9e1c42d4215f5b0dce62

    • SHA1

      4a5b446204693e0efc9b3edfae06b1c9ad6a0865

    • SHA256

      a9e74052fe1819723eb9d307a7b5a3a227e956c42c79067c727511a6fde96102

    • SHA512

      26818a450d479f08de52efd1ae291d1f9aabba4181ed1bb2d552e4c20de6f2c3bad69f0d1b29bd2d4b33a031833daf61ab82a01ab9903996e97182a52c853cec

    • SSDEEP

      12288:w3QyecmYq7i/49rbX4xDYifr3QyecmYq7i/49rbX4xDYifn:7taSrbxtaSrb4

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks