Overview

overview

10

Static

static

b141824ed2...68.exe

windows7-x64

10

b141824ed2...68.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b141824ed2d2cd53f453e6e4281795cfd8a60d2ade2e075701a7ca8df5a3d868

  • Size

    132KB

  • Sample

    221203-ya5m7adc9v

  • MD5

    f5e3d519273f3f57563a82c4a641c88b

  • SHA1

    54ee1703c0f741399cda23ffbced049322f73b64

  • SHA256

    b141824ed2d2cd53f453e6e4281795cfd8a60d2ade2e075701a7ca8df5a3d868

  • SHA512

    15040ed4c12147ada41503c671ddea102b5bc35b1b09dfa4e254249a5bebe99a64a9a7d1a6f04a2c06818025bc1e42d26eb3f9e4eae5503fa5230207690d6107

  • SSDEEP

    3072:qApsR6+xspX7//GSeIlLXkskMvB00bsMyXeWLkr:qApsEI+7//leIBXTkMZ00bsMyXeAk

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b141824ed2d2cd53f453e6e4281795cfd8a60d2ade2e075701a7ca8df5a3d868

    • Size

      132KB

    • MD5

      f5e3d519273f3f57563a82c4a641c88b

    • SHA1

      54ee1703c0f741399cda23ffbced049322f73b64

    • SHA256

      b141824ed2d2cd53f453e6e4281795cfd8a60d2ade2e075701a7ca8df5a3d868

    • SHA512

      15040ed4c12147ada41503c671ddea102b5bc35b1b09dfa4e254249a5bebe99a64a9a7d1a6f04a2c06818025bc1e42d26eb3f9e4eae5503fa5230207690d6107

    • SSDEEP

      3072:qApsR6+xspX7//GSeIlLXkskMvB00bsMyXeWLkr:qApsEI+7//leIBXTkMZ00bsMyXeAk

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks