Overview

overview

10

Static

static

dc00ff8095...82.exe

windows7-x64

10

dc00ff8095...82.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dc00ff80957000e35e4cc0a7f698b34dbbe31951fad4269b4f4bc9abbe9a9082

  • Size

    84KB

  • Sample

    221203-ybw3fahg35

  • MD5

    6a66b4064c2bc6a964d2f8e983cab38e

  • SHA1

    960eff6bdf0d60cdaeae5475c3c12abe65d567f8

  • SHA256

    dc00ff80957000e35e4cc0a7f698b34dbbe31951fad4269b4f4bc9abbe9a9082

  • SHA512

    c8aa5627eeac2ac9a4b66c7dc38c646e2299b05ba7d46bc1802560d35ba4586b3e7cdce89990263cd57cd3497bd32902371e5586eb1f303b31de5b5d2181c599

  • SSDEEP

    1536:26h9ot5o97nmPn9UrYZl+4gSr7AFJGVvvkCWnU45D:LYMCDl+4FvXWnUwD

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      dc00ff80957000e35e4cc0a7f698b34dbbe31951fad4269b4f4bc9abbe9a9082

    • Size

      84KB

    • MD5

      6a66b4064c2bc6a964d2f8e983cab38e

    • SHA1

      960eff6bdf0d60cdaeae5475c3c12abe65d567f8

    • SHA256

      dc00ff80957000e35e4cc0a7f698b34dbbe31951fad4269b4f4bc9abbe9a9082

    • SHA512

      c8aa5627eeac2ac9a4b66c7dc38c646e2299b05ba7d46bc1802560d35ba4586b3e7cdce89990263cd57cd3497bd32902371e5586eb1f303b31de5b5d2181c599

    • SSDEEP

      1536:26h9ot5o97nmPn9UrYZl+4gSr7AFJGVvvkCWnU45D:LYMCDl+4FvXWnUwD

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks