Overview

overview

10

Static

static

79e27140d8...29.exe

windows7-x64

10

79e27140d8...29.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    79e27140d8205e6cce1094a53cbcf57336247c1a1d6ea209d932ec2447c1e929

  • Size

    256KB

  • Sample

    221203-y6aspagb31

  • MD5

    8647d5390d9e8bfabd6648d9ee4195e8

  • SHA1

    4f0e5edb6c493cb38de2b11b11c77daacdc013cc

  • SHA256

    79e27140d8205e6cce1094a53cbcf57336247c1a1d6ea209d932ec2447c1e929

  • SHA512

    caeb4a29869704e74fdb3f7c8a3742dfee9c0e3c20d8f583357b60e1b0fd4257ed971b76a884c79529961d402cd348e665d9dc00fc4cfc647013c8424ca70310

  • SSDEEP

    6144:1BawbQXn2J5V2aWOKojDOgbTnNkyjZjj65:1AwbQWoOKojDOgbTNkuS

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      79e27140d8205e6cce1094a53cbcf57336247c1a1d6ea209d932ec2447c1e929

    • Size

      256KB

    • MD5

      8647d5390d9e8bfabd6648d9ee4195e8

    • SHA1

      4f0e5edb6c493cb38de2b11b11c77daacdc013cc

    • SHA256

      79e27140d8205e6cce1094a53cbcf57336247c1a1d6ea209d932ec2447c1e929

    • SHA512

      caeb4a29869704e74fdb3f7c8a3742dfee9c0e3c20d8f583357b60e1b0fd4257ed971b76a884c79529961d402cd348e665d9dc00fc4cfc647013c8424ca70310

    • SSDEEP

      6144:1BawbQXn2J5V2aWOKojDOgbTnNkyjZjj65:1AwbQWoOKojDOgbTNkuS

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks