Overview

overview

10

Static

static

98a014a709...62.exe

windows7-x64

10

98a014a709...62.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    98a014a7093227260dd4f180fdf8625273cc7a4e87fdd5da4c61726a584af962

  • Size

    352KB

  • Sample

    221203-y94j6sge4x

  • MD5

    8c1fd74809604a447d75094265c86079

  • SHA1

    148d4e3aab0f924de6e86b3afeef12f56dfd4019

  • SHA256

    98a014a7093227260dd4f180fdf8625273cc7a4e87fdd5da4c61726a584af962

  • SHA512

    7dd8755e3f01b6477efda9f3f8390acaf2953ffb12a57eb4e622564dcc4bdc649dc0578d5aafc7df79f66f016fb56760c6455e9c9ec5e11f8a0fc91a21186131

  • SSDEEP

    1536:8XnNYyeU3CyDiXMDlsVRurDyzWro4/5oFfCRatjLrXAvzGvF7cLj7oZES7StgRIS:EILrXAvzGvqS7StgRI7buvCK0u3z

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      98a014a7093227260dd4f180fdf8625273cc7a4e87fdd5da4c61726a584af962

    • Size

      352KB

    • MD5

      8c1fd74809604a447d75094265c86079

    • SHA1

      148d4e3aab0f924de6e86b3afeef12f56dfd4019

    • SHA256

      98a014a7093227260dd4f180fdf8625273cc7a4e87fdd5da4c61726a584af962

    • SHA512

      7dd8755e3f01b6477efda9f3f8390acaf2953ffb12a57eb4e622564dcc4bdc649dc0578d5aafc7df79f66f016fb56760c6455e9c9ec5e11f8a0fc91a21186131

    • SSDEEP

      1536:8XnNYyeU3CyDiXMDlsVRurDyzWro4/5oFfCRatjLrXAvzGvF7cLj7oZES7StgRIS:EILrXAvzGvqS7StgRI7buvCK0u3z

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks