Overview

overview

10

Static

static

a64f5d1829...95.exe

windows7-x64

10

a64f5d1829...95.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a64f5d182967cc2f86c0fed644db2075ecc65f0f64339e28031e4b0d60633295

  • Size

    244KB

  • Sample

    221203-x9n9tadb6t

  • MD5

    d4b168c1b3fb18097c7f7fd5206ef2e2

  • SHA1

    82a4c45b9f499e589a32eda1b0847d604d7f580d

  • SHA256

    a64f5d182967cc2f86c0fed644db2075ecc65f0f64339e28031e4b0d60633295

  • SHA512

    d5c199ae303f78d79d2e667d6e91f1877b182eb5633e4b044023f4b32d0df64079e4f3dbe39fbcfbd3f2ee3ac0ee3ea0a6bc898261dbef5085b76902d94d9eba

  • SSDEEP

    6144:YRww39SfGzlTphJgW9mnrQLMjTsZzILK/fObT/bGiuF0a59ONKLUWrIhO1a8p5xV:1w39SfGzlTPJgWUnjjTsZzILK/fObT/A

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a64f5d182967cc2f86c0fed644db2075ecc65f0f64339e28031e4b0d60633295

    • Size

      244KB

    • MD5

      d4b168c1b3fb18097c7f7fd5206ef2e2

    • SHA1

      82a4c45b9f499e589a32eda1b0847d604d7f580d

    • SHA256

      a64f5d182967cc2f86c0fed644db2075ecc65f0f64339e28031e4b0d60633295

    • SHA512

      d5c199ae303f78d79d2e667d6e91f1877b182eb5633e4b044023f4b32d0df64079e4f3dbe39fbcfbd3f2ee3ac0ee3ea0a6bc898261dbef5085b76902d94d9eba

    • SSDEEP

      6144:YRww39SfGzlTphJgW9mnrQLMjTsZzILK/fObT/bGiuF0a59ONKLUWrIhO1a8p5xV:1w39SfGzlTPJgWUnjjTsZzILK/fObT/A

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks